last executing test programs: 11.377067514s ago: executing program 3 (id=6359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000001e80)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}, {&(0x7f00000003c0)="c4c9aed789c633d5552a24b1", 0xc}, {&(0x7f0000000c80)="7d94975e35cdf6b776173d05578d8c8b5257550acf2283008edcf633b43fb1500e6e5525b89a5316fb202960cdfc5d8ad63f8b7b236e36103ca379306dc96c39b0d591b99a8b4cc0e663828579338bbc9f63ec36c26b00c724dccb3f786506319bde039ebf8718ded1bdb0fdb8d0867796e11146b944c29a22f7ff5e855556cd57c95206ad89e64c2e114ecfc3b4ffdb05d37df5ed76dbec3ab4a2ac81898e42dc2dd63e04f701211b34852ee09a66c8e9b4785ccf3720614a6e63dacc6d6f04d5ae5882e144fcf2153fb78d0f80d8e4ccff87b456e3c668782d66dcaa6d8692adf95796794ea29f2399d036d8cc4dba615fb9e53039d70b037df48b502982fde4411853224832c4cfb3e63f4954dc909a50c7d6e7c929b1dcca3d92e13999153927ca71bc8c75443e1c96a3ce91cc75d73eb61c21161d825daf087e1b818d2ad0040543cf37b4fce264ba4c18fed7a23f052d95cbca09bb0f5318ab0ce74273c9d6c26f05254c5ed4f6ee3ec6a6312aad0bac493ca711aab4d58c68af458bb27fb3384c2da989120a6a20a1c596f588da8ad7bc6a63cb3135552aa9a103a599b5cbaa977d4a207dcf4dc8fcc7a4ce040058b9dd072d4c193d56b3dfac2a24452f5fee200bcb34ffe067c2fada6096b32869129a46320552e8ff13fcf208caae53152f300b909a803e92f7dbe087933adf7a7295e898ad6e8d148f7a11a7c0c7acfd5e88b193c3c1c362f248e158530312baad970aec55ca339f36e8eae1cbb11cb5f1f408e94ebcdfab928f8d5e6ce19251a73ec9c3be982f8977b397ba4ca05dd51174599a0554608c22c9ba7f4b9aee9ab2dccc956a8a520c896cbdb6405437d6636363c28180d34d596f38997295ca1ee191928925da3bcb2aa27e78f74098023164e38fbe0ccade3659650dcf61f10b2e5cbb63bac6b6849a8d6b31cfa55d6c447147b724b194b7dba4dc2cc044fda1016d027e1144599a8d4162ced66ae203f67964200c1dd7ed546caf32a1bb2740a6a764ce6557f6e0c64750302eee7d7a70c0232d7f346437cfd6b1f1e4cf81d10a1da7e67dd534e03f78646eca7068b6b9768de9bac9a313436f147770a97b245a2dbfd1f50d30263dbfb5515c29b26a3d8edc07df6b0aeb2d4668c2c698b0a36a48d8ce52c7e946883dfd14f01adbeae8218d6c62e23200bf4f7fe574adff16bb41ae31a509d1551773f23c7c30db07edd525fe593a3d384cd3c09a47daa5feac4a2d8c735e4b11df3aa8d2aeacbc95909d1e07ce64f7d16ff8344aeecf7e4f1e527b01111cbcd35d51dbf3379f65f64efe936f609d2a71d0b38b42d40eab8b02103b51733305ad63e78b1fa0891bbf1107924fdce63b48d854e893f883758f4c322176cac1f3635603b13be4216e5f8dd351eee070c117828cdd46b909785437da24ee5eb5898ee070da568b999a2b698867c7644c23fddd071d3373cac82294c1a4d903f72056f2ef9a39bd9f09694465f8f4d1d575f221171f4c048492c50484c1e25ac86b1ee8204f33701aade0d475d9734f905ae02268c5904fd0954d7fd0ba3bdbf0f7c27bd1f73fad21ab5e9f6cd571f3686bc49ef9cb46408eea889ef8c17bc98dda742137b58c4c649097f3b5337b48530adea06d9815b440fe64d45a61dda0feed6f8407b280eb4ba490c378ec805572a8de9c17d0278d253a17d21b93fef9b2aab4dd8e6acb970be40eee65d2bdd147815e1c9c80feb46ba8fd51a390b72917b165eb57ccdfd39186a6f330c2df83959f29bdbb10809cd52c9dbc48370cb496f45ca4edbdadec1675bdc57e9248a0f36d6433bd9d9b9b893b9c986b07790cbde6b13f3fd5f39d55cebf9bf8e1b0f6dae574c2a2213bf4e4e0af11a9335e4bc8b63c3972484d3a82fe028528b14116beff3af59a123302f2ebb8fd7b5c56498371995987d78f01b7874ec40cba74047e033a32904967e82846068c5e3eca7f238fa883534a276ff3f928177bffa1e6d47908ba8afa7b25fd07fadfcb8486433299921b9d81882f8f2be68661c6c3bfd3feadbe04ed272eeb6260d271aa928927c8bf518f544d57692c27ecf71aed3937ebf7879e28b2a63c0a91581bf2461c1d586198c56e2eaa7101389a70ab5e1c21e9205e1fa2baae52e0a5f96f31d4fb3f68fd7a99af472001cb7b9b50b897a9df08c510303091bc97a278cd01d0067ba6a0d04cbedc3e24b7494ca42abbe45f4805bf0527d3ce7713e41af2bd6fab71e93e3c7773dd065c63446d83639814cf0ddf38c817b80156b3d635dda91710f6a04de0abcff19ecc9d1e54416543c0a26c814fa176ba4a5acad91b0f68e6bd6c25d5f62accca0607f2928a6b85520fa0f515b0c0a3a04fab02b8fdacd95d5a6952f2612809bd6b95d3dddb70b83fd3179d12bcfae02ed058c4dcabb6409ca2b4b695797eb5439a49da4901cca7e39dfaf5ec66b81cd695db42f1cb1fae72e37a14ab0c2f3c2a741636d3fd478c973a9926fbf8ce30da226fa8d5d592fb4d4b5c09906e2811a08d0653e2a41de5ef8747a41e04144bc03c6d5a199e962f4fb24a5493e5537afcc79da1a591de9fbea24dfd04bd6cccbd90a9cdb49bf034e2e4fb10aef017d207a75ffdbad84bb49cf2401113fcf888f37adb890100b6bb6f4cabc36a832686c5a418cc709cb470f1b7036405809d486a8c27083ab6c048de4f7e891dc08e766a58a028897514f019dd98529997984c08bfebe7a1a3349fe39ed756314f2308f0dad1aa053d265e1a7418698de7fb3a3dbf5e818bda57cc0f885789376c43d1702f88e012a1b870b5a120b7f1c70ac81d2cc28fe0d5600b7163c08a9d6fba02444588d46a09461f4f59b8f31c659629b84f711e30b3c9cc12da6c33b817964fb90ab29a8e5c3759bf0c1e5bb64f721539ce7869b3b416c77779af0f646f94699817a599810695b01c88e9364c1b837c2ca204a733feadd0e6dbbfa55e9d82dbfb6702ab054f0b9b93fe06e5310c10b98cb5f940a2b3487d899831a90e8d95a7cf147ca7049d516f52192cb3887ab35617813bba443e9d85766d5da334513f79868f447154dee17b2d3d98834823e86244e16b84437b32839b8ac7d78e110b765264222f552506ccb4b3abb68efa67db09478ea7dfe3e73d6e1114664938b7ecd90a5d7cd5cd3f9a8db1f4d9d8d8e2fd1ccafa61fb210a9e2e22c6f5ad1b94d4cf241e55194c5bb31a1158d63a5d125a52f04840d217e2a47ab9abaa55456f53954d224ffaa06c08a029787fefb3f7c52012ce8f45449dd4fb73c3b4d53504b5af82a8c26b805cfa65726e9b761c8c6afe745a9765a1b40894969d94427b58aef042d8d8a47a8a440b7f01bb9e2ccd5dfe6a0fd780984a58e7f0089753591db0479309dce5c0993704d03c4fae23d855e33c6e95469bcca0219d6dc099dcf4af1eb523e04c23de5c27c36b6260a11efc0a305cf80c4412c460284e46745ff5ef09a4de265d8e30cf75dc9cdad3869afff02eee23300ce076195f76153ab5802c7f2113fe449453d9f4717619e6e68122790012973396161dea0b3a129a664f4c56bcf383d70f11237bc675608d46679c93ba0cc0f94eeb3f51f2678a265e660335239a4d7ef875fd19922239915080ad13f3ceae29516d7b90f7b3b0eb328468f4a8f2e130fdb552761c2bb47cdffe21e271118898cb8bcd5d25fc0c0a301fd1b08649c4a0abc104614c8ab9fad9a510fe6260098c6d469d1f78b3bad2347c8767b0059e34b8f20a65064cbfe6c66e567ebffcbd91fb8811b1b3e0a0bf428c716d88d6ef9bdc4be8290ad3badb1c582052235c56dff9f3c437e769c9ffe37d19640cdb624817dfa6c3660e7f52841982a503e481d9a50bba67a785aa67682e69136cd6f2c0827b338f4513ff8fee0b98aebbdc583de219ca465215aa6b266008b2bd7166751411435b828f833682c9932ec24136ff0992adae429d037298bcba01b6ea61e5ff1ba0f2fca9f6848d396f4ac3cb79316536e30f2df86c71493d59b7716fa47c69ecfa2d85d18b88ce30a133ef0aed023a9ce3753c12d8d010b4cd4600c72bd4f37fa6dfb6fc376a1d8b71c1f8c61bdc83503bbd0df7dfff692d3a5d21b15ba9f875e6c797f7a26dcaf99c99353f4be3d18ced7d28ba21f5ea7c1dd82782673dedf6ed83204e56bd4cac8ae5c7203b914fe4e07fc69e163533cb49622afb01d06a3dfe4339a207f5cd407c8474e45cfa926fc697cbfd62d970356015aedfc94173dd108ba4f734cd40be11a681021c8d8d229cd0fd05acdc839e2a4dd19c287b1b3e408eb1b5764c89226a380fb67eab88d9716ca9c804e32b71d2370de89ec530d8088a4a1c718a0c98ade9efda1b6ec57634ff6812e4ab05bab9915ec20f0e843e2a558547df52f36bb75aca08a23a9387d60668976bf2d71b865d2672e1fd145e18aaea9d9f1f38ad478752c1c079c032d09946402295d021c0945b464414528169cedf4689307f16412d2cd0dbac177405de7a47e3d5f232ee448b1670499823020aa9dd3601f30c5e8fe9b01a33c9bb5413802c5986dd1d5c102e8cc1e75254462d098098f0da43caacc334886f17075d77f6f3753b7254a72c8a121814ed9dd4cde38ae32848c7b420126b70c5c9848fc36b45b67659b12c9a7d719df9d9754ba6a4b7e1c934a3f04eaa287b216fdf7628f77bb459caa387771471fe958b2f9cd87b291b88fcae16d51c8ec244d1eb40b010f484d9b876ab1abfe29b9de9f905791368a1d2b79d69746db6fff1274e857d6a30b205b3fb1d75cb307eb74cd6e25995ebceedbb6b49489e5d72ea90c20c5a48ed1038dcf3aefd71b4a6c0946024cd423dc5b0cf406b8460d577aa4a369197c64cb8d26ed8ceb29dd14c459812a28baf06d0b2059365dd4e7919aae67c983f1c81ae47b5c0525f5714840db2709a0a0fb89776114fde55d74a6944388e115424e87f021d14a1eb5d1edd81e5fecff46e99603f350eeedd6cd6f5eaa1db1afd87057fcea466a0dba27aa95ebbb707af12c1030323e497f4bab802eddebaf41245bbec14947e061b4aacf9e55f6d23b0cafe71829a4627fb5c706c910552c667d6dd038cbd5cc4c5b5e5d03522e176e5a744c2c598ca1d2d1cdc6f28bf86c9027ebf452470e2eb3b1196321a3068dc3732e07d3c281e342c2c49dc0691be438c219acef95f8da356313d22a3c3984c5677b9781dd089dc9ed78c226c36c8608ddf27e9ca6b88d1ca466fe3fbe9758b17dea69eab3d253298bb400ce0cc6f180b221bf8a8cd8cf08c5030762e08fe2783ddbca0e6f5fd47a520178e45408309e14b314d6797d2e43a9b1c5fbbc6a25cf19bae19fe195e42cebb39cbf5f6ebdc4a3c526e527224537af3dc1f8e0ea3e5c3dbbe0772db02f68a8bbcad72190fca88db6b48e02080f5c5817ba0554124e8fd92ddabc6585e2aca4fd21b10edbce419a3403ae3", 0xf19}], 0x3}, 0x5) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$NFT_BATCH(r3, &(0x7f0000000a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x1b8, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_USERDATA={0x74, 0xd, 0x1, 0x0, "16b315d95a0668b43a510e51e1768c5d3833598c04b3ca3de1ab8987e972113969296576756375b863e4b6ff03b3061393e4d3b533366b62807b4e2ec312338c0d2c65ec5160fdf7a4be4936710e26018fd772ec373441485c43fde8a8a07bbe97f3efe1c9b5ce92d0c10440ed793a96"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_ID={0x8}, @NFTA_SET_USERDATA={0x6a, 0xd, 0x1, 0x0, "4598427a9a2896e9f657dcb9888053ac119b7f85a46375e275b82049dc48e0f2fc68ea3460d905ddf60bb18063cc0b699a04fcf25b3cd0eadf38419694bb1443bc5c49a0b0a7675a3fad92c3b8dfcb46773d62d5c8d775b31be1837bce0e8c33721613536aa0"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x34}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x114}, @NFTA_SET_USERDATA={0x89, 0xd, 0x1, 0x0, "94e1737ffa1314342516fff968e7d68d9e56e1a69049e4fd6cc0b1fb0a88755f3522806d7d8484326477bc511916d37c84ece6965f8217acaf5d6f648c4ef43ab215b0950b32d8cd0cceb965c43a222efc6455c3a275b01addbb712c2203dbc0dfc3b8ab8985435d6ce4456ed97631e7504142585abbdd0721f7b42c7c3ebaab4b34148ea4"}]}, @NFT_MSG_DELSET={0x104, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x9c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x98, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xce3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x91}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x53}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4c6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x458}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}]}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xa}, @NFTA_SET_USERDATA={0x1a, 0xd, 0x1, 0x0, "4643a8c38c1ffb807f28fa2abab086d335ded07ca31a"}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @nat={{0x8}, @void}}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x153}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x368}, 0x1, 0x0, 0x0, 0x20048085}, 0x800) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a3100000000150003006861"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000009060300000000000000000007000000340007800c000180080001407f0000010c001480080001400a010100060004404e2400000600054050640000050007000c00000005000100060000000900020073797a31000000001cf7307697486ae944545e0652fdcb7be4673d8cb1403e69127e239156aec15496a2131b3a8d106d956ef4f4bd3093697b45ce9c3a92e80fc75d466b83b1d8edd473bd3bf88bf12362bbd36e7ef83fb24b027f30a2ff9678ae3ee2eb4af130ea937697437b11e3896e108229d2697664ccd78583a01ee58034e0ab3cd3349bb610de5e2d5e33fe891f5835993798ce18fd060e0e133b25d6669f0fdaa8c12018ef820af1d1020ba442fdeea001a7cf57fdb4c25b896089f435c00d6e9902b7818ac33d0657fdedf0c4968c3cf991c89b5801374ca017cd346407756c654c1f2b021609cb84c4a76d80f5b84afbc3f3c147a9f3d7cd2fbc6825dd802fa7ca3e855ee0b62b01fe"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 10.978680482s ago: executing program 3 (id=6363): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r0, 0x200000000000000}, 0x38) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x7d, &(0x7f0000000100)=@assoc_value={r4, 0x5}, 0x8) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r7) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x68, r8, 0x5, 0x0, 0x0, {0x1, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r8, @ANYBLOB="050000000000000000000501000030000100000000000a000000060002001100000014000300fe8000000000000000000000000000aa060004001f9000004800028014000100fe8000000000000000000000000000aa060002001f900000080003000300000008000400010000000800050000000000080006000000000006000b000a000000"], 0x8c}}, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r9, &(0x7f0000000b00)='hello\x00', 0x5, 0x0, &(0x7f0000000c00)={0xa, 0x1f90, 0x0, @local}, 0x1c) (async) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x8, r1}, 0x18) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @remote}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x69, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFINDEX(r11, 0x400454da, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f000000abc0)={&(0x7f000000aa40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @typedef={0x5, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0x8}, 0x20) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1f9, 0x1f9, 0x9, [@var={0x6, 0x0, 0x0, 0xe, 0x4}, @struct={0xd, 0x5, 0x0, 0x4, 0x1, 0x9, [{0x8, 0x3, 0x3}, {0x5, 0x4, 0x19e0}, {0x1, 0x4, 0x9}, {0x1, 0x5, 0x9}, {0xb, 0x4, 0x2}]}, @enum64={0x6, 0x4, 0x0, 0x13, 0x1, 0x8, [{0x3, 0x5, 0xc3}, {0x2, 0x6, 0x4}, {0xa, 0x1, 0xda8}, {0x3, 0xfffffe00, 0x9}]}, @struct={0x9, 0x9, 0x0, 0x4, 0x0, 0xe00000, [{0x5, 0x4, 0xe}, {0x1, 0x4, 0xfff}, {0x6, 0x4, 0xa1ef}, {0xd, 0x0, 0x1}, {0x4, 0x2, 0x1}, {0x4, 0x5, 0x1}, {0x8, 0x1, 0x6}, {0x6, 0x3, 0x18}, {0x8, 0x4, 0x1}]}, @restrict={0xc, 0x0, 0x0, 0xb, 0x4}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x7ff, 0x9}], 'm'}, @struct={0xb, 0x8, 0x0, 0x4, 0x0, 0xea1d, [{0xf, 0x2, 0x7}, {0x8, 0x2}, {0xb, 0x2, 0x1}, {0x8, 0x5, 0xed33}, {0x1, 0x4, 0x6a7}, {0xf, 0x6, 0xffff7fff}, {0x1, 0x0, 0x8}, {0xb, 0x5, 0x8001}]}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0xb, 0x3}, {0x10, 0x3}, {0x6, 0x2}, {0x2}, {0x0, 0x3}, {0x3, 0x5}, {0xa}, {0x6}, {0x9, 0x3}, {0x3, 0x5}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000340)=""/60, 0x21d, 0x3c, 0x1, 0x0, 0x10000}, 0x28) (async) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r12, 0x20, &(0x7f0000000500)={&(0x7f00000003c0)=""/103, 0x67, 0x0, &(0x7f0000000440)=""/173, 0xad}}, 0x10) 10.281066059s ago: executing program 3 (id=6367): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x4, 0x40, 0x9, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) 9.931633334s ago: executing program 3 (id=6372): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x43, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000001240), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112dd000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000040)='#[\x92\x00', 0x20000, &(0x7f0000000080)={@align=0x8, {0x4, 0xde0, 0x8, 0x1}}, 0xfffffffc, &(0x7f00000000c0), &(0x7f0000000180)=0xffffff01}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x18, 0x300000, 0x3, 0x1, 0x8000, r2, 0x4, '\x00', 0x0, r3, 0x0, 0x5, 0x4, 0x0, @value=r4}, 0x50) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003000)="0100000003000000640000000000000000000000000000000000000001000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}], 0x1, 0x4000) 9.465463527s ago: executing program 3 (id=6378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000800)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000480)=ANY=[@ANYBLOB="01000000627070fc333ef38671d50e58a9a0cb7b5c3d4d44e14ef5d9577513181669ad9fe9cbd039d6fe2a1defc52699d49580196dee913ad56cafa70e743059f03db7ae659839", @ANYRES16=r2, @ANYBLOB="000427bd7000fbdbdf25010000000000000008410000004c0018fffffffc75647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x20008094}, 0x20008004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100020e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x9, 0x1}, {0x3, 0xfff3}, {0xd, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff2, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x10, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0xe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x640040f0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) accept$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, &(0x7f0000000440)=0x6e) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x7d4165c9) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r13, 0x0) 8.905034794s ago: executing program 3 (id=6385): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d3000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x34, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x34}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000001980)=@generic={0x3, 0x1, 0x7}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@can_delroute={0x14c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x47, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "56e89243dad36ae9dc7283425f986bbfe5349c4e"}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "80deae486c1a0221"}, 0x6}}]}, 0x14c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r3, &(0x7f0000000100)='hello', 0x5, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000000c0)={0x0, 0x0, '\x00', [@pad1]}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f0002"], 0x34}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r7, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_FILS_KEK={0x27, 0xf2, "12e2dbd6bef2a218f1337a628f0a028ef0f0a09307ba2c08d6a89faf47d52c2b1c12f9"}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="e785b5f6685c"}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="b170fb8106b1"}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x8800}, 0xc081) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) read(r9, &(0x7f0000000180)=""/115, 0x73) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000014001901000000000000000028001100fa"], 0x28}}, 0x0) 2.381373401s ago: executing program 2 (id=6418): r0 = socket(0x28, 0x1, 0x0) write(r0, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000040)=@ccm_128={{0x303}, "5ddcee406a73e9d3", "70a2c8cf7da43b3778a965018c7d0500", '\x00', "0328d20f8cdc8b7c"}, 0x28) 2.380687022s ago: executing program 0 (id=6419): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711031000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [0xff], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_to_batadv\x00', 'tunl0\x00', {0xff}, {0xff}, 0x8, 0xa, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xfe1, 0x80, 0xfffffffe, 'snmp_trap\x00', {0x80}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0x0, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0xffffff00], '\x00', 'rose0\x00', {0xff}, {0xff}, 0x6, 0x40, 0x5, 0x47}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x4}, {0x9, 0x7}, {0x8, 0x5000000000000}, 0x800}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) connect$can_bcm(r6, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000010500"/16, @ANYRES64=0x0, @ANYRES64=r6, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0100006001"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xd50, 0x0, &(0x7f0000000000)="aaf3a4cd08258cebe46db996738b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2.350649753s ago: executing program 4 (id=6420): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xe3, "f6fb38c3445e0fd8f4cafdb49d71971bd7383160d3734c339abf6e146b3d2302cdcfbf4923183607219d18c9de95f2f70a637c0f8246d3da56b862843ba4957a4bd4eb3c879d8461e8f15f02dcc6195d6480e85474ef54187043e00180be24ed5564802d2e7c98452eeba7b874032f6bc0cc10f766e9ea5f8d8ffec4b8b0b4cd276898e4d225aeda05d1b8e704d9df1b09886df1092b5259bf06bd0fd7f2453bfb699d512858b16f574b3deeb36d2cbaa0d88bb902db5e4ec8477ec8eddd75e97a382a83ed03bf961616a231b25528fb42490ad734b20200bb92710f752a097fd20d77"}, &(0x7f0000000100)=0xeb) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r1, 0x2, 0xf}, &(0x7f0000000180)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r1, &(0x7f0000000200)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x8) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x4, 0x5}, &(0x7f0000000300)=0xc) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x4, 0x5}, &(0x7f0000000300)=0xc) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$nfc_llcp(r6, 0x118, 0x3, &(0x7f0000000340)=""/77, 0x4d) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000003c0)={r1, 0x80000001}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000440)={r7, 0xbd, "17397de1d66219ab897746386b90a32a4a6e0697698a18b826c19736fd92bfab90239b7e714d26223f562cc1a2cb70dac109942385bf82fd209c2fd4a6bb019bd7e30d529b9e6d8060d2d0ce19bbc8f9297a80eac1b831b6e5163ea3d3c82dee4f55b539d833b152c9ab4c9d59f0bf09f156aecda033c1fcd2022069c0769acec0d6e7e4bfc1f22aea75ed352d7d5a009cd9755a09ce1076640950ff19fde94b81bf0a2124775d291366aa532581b8a2b342aa20b97f99bff92777ffb2"}, &(0x7f0000000540)=0xc5) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000580)={r5, 0x9}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000600)=@assoc_value={r8, 0x6}, &(0x7f0000000640)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000600)=@assoc_value={r8, 0x6}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000680)={r7, 0x50}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000700)={r10, 0x9a14}, &(0x7f0000000740)=0x8) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000700)={r10, 0x9a14}, &(0x7f0000000740)=0x8) r12 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r12, &(0x7f0000000780)=""/186, 0xba, 0x40000020, 0x0, 0x0) (async) recvfrom$l2tp6(r12, &(0x7f0000000780)=""/186, 0xba, 0x40000020, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000840)={0x4, 0x0, 0x2, 0xfff}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000880)={0x3, 0xa, 0x5f1d, 0xfffffc00, r7}, 0x10) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000880)={0x3, 0xa, 0x5f1d, 0xfffffc00, r7}, 0x10) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f00000008c0)={'team0\x00'}) (async) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f00000008c0)={'team0\x00'}) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000900)={r11, 0x4, 0x1, 0x7ff, 0xc0, 0x6, 0xab, 0x8, {0x0, @in6={{0xa, 0x4e22, 0x78, @empty, 0x3}}, 0xde, 0x2d9f, 0x6, 0x5, 0x3e53}}, &(0x7f00000009c0)=0xb0) (async) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000900)={r11, 0x4, 0x1, 0x7ff, 0xc0, 0x6, 0xab, 0x8, {0x0, @in6={{0xa, 0x4e22, 0x78, @empty, 0x3}}, 0xde, 0x2d9f, 0x6, 0x5, 0x3e53}}, &(0x7f00000009c0)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000a00)={r5, 0x6, 0x10}, &(0x7f0000000a40)=0xc) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000a00)={r5, 0x6, 0x10}, &(0x7f0000000a40)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000a80)={r13, 0x6}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000ac0)={0x0, 0xd8d}, &(0x7f0000000b00)=0x8) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000b40)={0xfffffffffffffff7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "5b966539887ca7"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000001b40)={r14, 0x0, "8c70c74c89917c58ee30ed31796bd5ac1573636cf56b48a62eeb80d9e79a4832dc3bca9749865dc1839aa29b67ed17b8335ac63b8d60bb6c1d0b6c43e29c546dab616e17a3b1a9b2bf9451e062038751306e168b0873f2968e36fb157c0f48793d760893796964b907af8eb1ebde94ab6cf150d6ac6f13360464ea2e3d3aed15b55b64f8df64d2b1884fd7c750e1c77b04add9ef31de228a05879ac80a85d24437f92d50c7b7e5d9d02e51720cabb6fec4cee0cebc86b6e1c53ff4ca6bbf59db9ef3106593d67befb68a20c9de9456ed22f3061120aefec7b4f3a1353a4c137bbfd1c75f139b715342726b611f2be2346c73c7d9f5ba442987cb24f151240c98", "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"}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000002b40)={r10, @in6={{0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, 0x0, 0x7, 0x57bec912, 0x8, 0x20, 0x3, 0x7f}, 0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000002c00)={r13, 0x5, 0x9}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000002c00)={r13, 0x5, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000002c80)={r9, 0x30, &(0x7f0000002c40)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000002cc0)=0x10) 2.259889575s ago: executing program 1 (id=6421): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5e0a000000060001003500000008000000", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) 2.197332485s ago: executing program 2 (id=6422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x200048c3}, 0xc9b4473d509eb7e7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000420001000000000000000000030100000f0000003c00010000112233445566778899aabb86dd2c00001c000000ff07000000000000010253aa58fe6cbdf0357065ae44132403b1fd606412c32500006704000280040003"], 0x5c}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7002fbdbdf251000000008000300", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40) 2.144932191s ago: executing program 1 (id=6423): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'ipvlan0\x00', @random="4983347a7288"}) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'perf_event'}, {0x2d, 'net'}, {0x2d, 'freezer'}, {0x2d, 'io'}, {0x2b, 'rlimit'}]}, 0x26) 2.024250341s ago: executing program 0 (id=6424): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076"], 0xe8}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 1.929228327s ago: executing program 2 (id=6425): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x1, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0x8}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, 0x0) sendto$packet(r8, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) close(r4) recvmmsg(r3, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x21, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 1.843365991s ago: executing program 1 (id=6426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000210001000000000000000000022000"/44], 0x2c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800ffef08000500", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00'], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0x6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.626672229s ago: executing program 0 (id=6427): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x8}, 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56741, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xfffffffffffffd06}}]}, 0x30}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x4, 0x100, 0x7f, 0x540000, r6}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r8, 0x0, 0x20, &(0x7f0000000400)="170000000200020000ffbe8c", 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.581274455s ago: executing program 1 (id=6428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x11, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) 1.333181032s ago: executing program 2 (id=6429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xffff2355, 0x1, 0x5, 0x40450, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0xf}, 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000440)={r0, &(0x7f0000000340)='syz2\x00', 0x55d202, &(0x7f0000000380)={@_ha_fsid={[0x200, 0x8c]}, {0x6000, 0x4716, 0x800, 0x6}}, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x800}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x1f, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@exit, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xd1}, @ldst={0x2, 0x0, 0x4, 0xe, 0xa, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x47}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 1.308820419s ago: executing program 4 (id=6430): syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv4={0x800, @igmp={{0x7, 0x4, 0x1, 0x8, 0x24, 0x67, 0x4, 0x3, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}]}}, {0x17, 0x5, 0x0, @broadcast}}}}}, 0x0) 857.275411ms ago: executing program 4 (id=6431): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'veth0_vlan\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0)) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000040)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r5, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f00000000c0)) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000123802010324bd7002f755df33d1cb4c12"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r6) 781.402835ms ago: executing program 2 (id=6432): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x8, 0x4, 0xff, 0x0, 0x1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000480001002dbd7000fbdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002000a00000014000100fc02000000000000000000000004000314000100fc000000000000000000000000000000080002000000000026bd97c74f5528b85a3297d2a1cad0caeacbba3c266da3adc142deb1691ecc10e0944d20ce67f51aa3a1343fe3b340460b49b679bbdff0baea54a622bf843fd6500c5f2457bb7d48be18441690b3a60ff5cf5a5b8662fa30e818e2aa932834b8129b8aaaeb3ce127dba9647393854e7daed319660fd3b8aa6dd0ecff1f1f82"], 0x54}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000005700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x10}}], 0x1, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$xdp(0x2c, 0x3, 0x0) 613.311879ms ago: executing program 1 (id=6433): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff000000003b00007fffffffdd", @ANYRES32=r2, @ANYBLOB="2a003300d0000000080211000001ffffffffffffab2302000000f00f040400000200760661030900050000000400cd00"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbfc, {0x1, 0x0, 0x1, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20044010) socket$xdp(0x2c, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="24000000680049010000000000000000020000000000000004000b0008001000", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r11, 0x50010, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@newchain={0x38, 0x64, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x7, 0xfff1}, {0xdb3b88d2c8888251, 0x10}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xf9, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4004804) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x20}, @broadcast}, 0x10) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000008000000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r12, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r13, &(0x7f0000000180)="63c31416951b", 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x9, 0x79, 0x10, 0x70}, [@ldst={0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x4, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 522.816708ms ago: executing program 0 (id=6434): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x11000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000100000000000000140000001c0007800c00040202000000000000000c0003000002000000000000"], 0x30}}, 0x4048804) 473.223082ms ago: executing program 2 (id=6435): syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = epoll_create1(0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) recvfrom$inet(r1, &(0x7f0000000200)=""/138, 0x8a, 0x2000, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd50, 0x0, &(0x7f0000000000)="aaf3a4cd08258cebe46db996738b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x26ffc86098878bdf}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x20}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000380)={r5, &(0x7f0000000180)='\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0, &(0x7f00000002c0)={@align=0xffffffff00000000, {0x3, 0xb04, 0xfffffff7, 0x2}}, 0x7ff, &(0x7f0000000300), &(0x7f0000000340)=0x2}) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r7, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r8, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) 389.386707ms ago: executing program 4 (id=6436): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x8, 0xa96d, 0x4, @local, @private0, 0xf800, 0x7800, 0x8, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0x23, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', r0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 265.40548ms ago: executing program 0 (id=6437): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@loopback, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4a23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xe73c}, 0x70bd2a, 0x40003504, 0x2, 0x1, 0xa, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r2, r3}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x2c}}, 0x0) setsockopt$inet6_int(r5, 0x29, 0x43, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x1000000000000192, 0x1000000000000192, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x9}, 0x8070bd2d, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x0) 264.166701ms ago: executing program 4 (id=6438): r0 = socket$unix(0x1, 0x5, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x9, 0x4, 0x7, 0x80}, 0x10) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x1d, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e868817"}}) 1.157371ms ago: executing program 0 (id=6439): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1811920000000000e6ff00000000000000007110000100000000950000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 276.028µs ago: executing program 1 (id=6440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b100000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc5, &(0x7f00000000c0)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 0s ago: executing program 4 (id=6441): r0 = socket(0x25, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000040)={@multicast1, @remote, r5}, 0xc) socket$packet(0x11, 0x0, 0x300) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r6, 0x29, 0x1, &(0x7f0000000440), 0x4) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x20}, 0x8) close(r1) kernel console output (not intermixed with test programs): 6439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5194'. [ 690.790849][T26445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5199'. [ 690.946530][T26445] team0 (unregistering): Port device team_slave_0 removed [ 691.012844][T26445] team0 (unregistering): Port device team_slave_1 removed [ 691.034511][T26449] netlink: 436 bytes leftover after parsing attributes in process `syz.3.5198'. [ 691.284866][T26463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5202'. [ 691.517162][T26470] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5205'. [ 691.585300][T26483] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5206'. [ 692.234824][T26511] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 692.281512][T26510] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 692.285317][T26510] bond4 (unregistering): Released all slaves [ 692.864010][T26542] openvswitch: netlink: Key type 5126 is out of range max 32 [ 692.924886][T26548] SET target dimension over the limit! [ 693.535462][T26575] SET target dimension over the limit! [ 693.979229][T26613] netlink: 'syz.3.5239': attribute type 1 has an invalid length. [ 694.113832][T26627] vlan4: entered promiscuous mode [ 694.113859][T26627] hsr0: entered promiscuous mode [ 694.114072][T26627] vlan4: entered allmulticast mode [ 694.114089][T26627] hsr0: entered allmulticast mode [ 694.114103][T26627] hsr_slave_0: entered allmulticast mode [ 694.114120][T26627] hsr_slave_1: entered allmulticast mode [ 694.462058][T26639] netlink: Failed to add %pB helper -22 [ 694.462120][T26639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.856140][T26661] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 694.877843][T26661] bond10 (unregistering): Released all slaves [ 694.899328][T26666] __nla_validate_parse: 19 callbacks suppressed [ 694.899350][T26666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5254'. [ 695.009425][T26666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.101166][T26666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.578871][T26691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5261'. [ 695.762828][T26700] netlink: 'syz.4.5264': attribute type 29 has an invalid length. [ 695.838702][T26703] tipc: Enabling of bearer rejected, failed to enable media [ 696.126126][T26727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5271'. [ 696.126158][T26727] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5271'. [ 696.250002][T26729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5271'. [ 696.250031][T26729] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5271'. [ 696.284528][T26735] netlink: 'syz.4.5273': attribute type 1 has an invalid length. [ 696.284553][T26735] netlink: 'syz.4.5273': attribute type 4 has an invalid length. [ 696.284568][T26735] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.5273'. [ 696.287022][T26735] netlink: 'syz.4.5273': attribute type 1 has an invalid length. [ 696.287042][T26735] netlink: 'syz.4.5273': attribute type 4 has an invalid length. [ 696.287056][T26735] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.5273'. [ 696.403753][T26743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5274'. [ 696.404623][T26744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5274'. [ 696.837403][T26763] netlink: 'syz.2.5279': attribute type 1 has an invalid length. [ 696.903784][T26766] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 697.326647][T26795] netlink: 'syz.1.5287': attribute type 1 has an invalid length. [ 697.938780][T26818] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 698.049401][T26834] x_tables: duplicate underflow at hook 2 [ 698.095736][T26832] pimreg: entered allmulticast mode [ 698.427178][T26863] tunl0: entered promiscuous mode [ 698.441904][T26863] netlink: 'syz.3.5302': attribute type 3 has an invalid length. [ 699.468694][T26901] ip_tables: iptables: counters copy to user failed while replacing table [ 699.512086][T26901] tipc: New replicast peer: 172.20.20.187 [ 699.515461][T26901] tipc: Enabled bearer , priority 10 [ 700.243783][T26929] __nla_validate_parse: 141 callbacks suppressed [ 700.243807][T26929] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5317'. [ 700.779932][T26938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 701.254480][T26955] netlink: 'syz.4.5323': attribute type 1 has an invalid length. [ 701.356735][T26955] 8021q: adding VLAN 0 to HW filter on device bond10 [ 701.407328][T26955] bond10: (slave veth0_to_bond): making interface the new active one [ 701.421661][T26955] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 701.460305][T26964] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5324'. [ 701.463872][T26963] syzkaller0: entered promiscuous mode [ 701.463897][T26963] syzkaller0: entered allmulticast mode [ 701.496587][T26963] tc mirred to Houston: device syzkaller0 is down [ 701.805367][T26980] netlink: 'syz.0.5330': attribute type 1 has an invalid length. [ 701.916423][T26980] bond4: entered promiscuous mode [ 701.917266][T26980] 8021q: adding VLAN 0 to HW filter on device bond4 [ 702.003659][T26981] bond4: (slave bridge5): making interface the new active one [ 702.003685][T26981] bridge5: entered promiscuous mode [ 702.007374][T26981] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 702.281535][T26995] syzkaller0: entered promiscuous mode [ 702.281561][T26995] syzkaller0: entered allmulticast mode [ 702.363255][T27003] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5335'. [ 702.401663][T27003] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5335'. [ 702.401916][T27003] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5335'. [ 702.402168][T27003] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5335'. [ 702.402412][T27003] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5335'. [ 702.402622][T27003] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5335'. [ 702.402882][T27003] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5335'. [ 702.403126][T27003] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5335'. [ 702.703952][T27012] openvswitch: netlink: IPv6 tunnel dst address is zero [ 703.050467][T27024] tipc: New replicast peer: 255.255.255.255 [ 703.051355][T27024] tipc: Enabled bearer , priority 10 [ 703.314947][T27046] netlink: 'syz.3.5346': attribute type 4 has an invalid length. [ 703.805590][T27065] 8021q: adding VLAN 0 to HW filter on device bond5 [ 704.170087][T26610] tipc: Node number set to 4119071347 [ 705.082886][T27132] Bluetooth: hci0: unsupported parameter 5161 [ 705.082909][T27132] Bluetooth: hci0: unsupported parameter 8192 [ 705.082923][T27132] Bluetooth: hci0: unsupported parameter 5161 [ 705.082936][T27132] Bluetooth: hci0: unsupported parameter 8192 [ 705.083230][T27132] Bluetooth: hci0: unsupported parameter 5161 [ 705.083246][T27132] Bluetooth: hci0: unsupported parameter 8192 [ 705.083259][T27132] Bluetooth: hci0: unsupported parameter 5161 [ 705.083271][T27132] Bluetooth: hci0: unsupported parameter 8192 [ 705.083486][T27132] Bluetooth: hci0: unsupported parameter 5161 [ 705.083500][T27132] Bluetooth: hci0: unsupported parameter 8192 [ 705.083513][T27132] Bluetooth: hci0: unsupported parameter 5161 [ 705.083526][T27132] Bluetooth: hci0: unsupported parameter 8192 [ 705.083742][T27132] Bluetooth: hci0: unsupported parameter 5161 [ 705.083756][T27132] Bluetooth: hci0: unsupported parameter 8192 [ 705.168543][T27136] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 705.171546][T27132] Bluetooth: hci0: unsupported parameter 5161 [ 705.171603][T27132] Bluetooth: hci0: unsupported parameter 8192 [ 705.557600][T27155] netlink: 'syz.3.5374': attribute type 12 has an invalid length. [ 705.598818][T27150] __nla_validate_parse: 38 callbacks suppressed [ 705.598840][T27150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5372'. [ 705.666345][T27152] veth0: entered promiscuous mode [ 705.666766][T27152] veth0: left promiscuous mode [ 705.752450][T27166] xt_hashlimit: invalid interval [ 706.020722][T27175] xt_HMARK: proto mask must be zero with L3 mode [ 706.114127][T27186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5381'. [ 706.114152][T27186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5381'. [ 706.230562][T27180] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.5380'. [ 706.230848][T27180] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.5380'. [ 706.231139][T27180] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.5380'. [ 706.231414][T27180] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.5380'. [ 706.231709][T27180] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.5380'. [ 706.232036][T27180] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.5380'. [ 706.232325][T27180] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.5380'. [ 706.579701][T27196] xt_CT: No such helper "netbios-ns" [ 706.977011][T27229] hsr_slave_0: left promiscuous mode [ 706.981593][T27229] hsr_slave_1: left promiscuous mode [ 707.025964][T27225] syzkaller0: entered promiscuous mode [ 707.025990][T27225] syzkaller0: entered allmulticast mode [ 707.419750][T27244] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 17 bytes [ 707.776030][T27251] bond5: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 707.781253][T27251] bond5 (unregistering): Released all slaves [ 708.047127][T27263] bond5: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 708.081762][T27263] bond5 (unregistering): Released all slaves [ 708.110877][ T52] block nbd2: Receive control failed (result -32) [ 708.344633][T27276] x_tables: duplicate underflow at hook 3 [ 708.511003][T27280] xt_hl: Unknown TTL match mode: 255 [ 708.704967][T27284] syzkaller1: entered promiscuous mode [ 708.704992][T27284] syzkaller1: entered allmulticast mode [ 708.711392][T25680] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.711751][T25680] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.711843][T25680] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.711941][T25680] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.773703][T27284] netlink: 'syz.3.5410': attribute type 5 has an invalid length. [ 708.820507][T27284] geneve5: entered promiscuous mode [ 708.820532][T27284] geneve5: entered allmulticast mode [ 708.850580][ T289] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 708.850689][ T289] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 708.850728][ T289] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 708.850770][ T289] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 709.447824][T27325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.447851][T27325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.940403][T27340] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 709.940442][T27340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.944757][T27340] netlink: Invalid conntrack timeout [ 709.944791][T27340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.207218][T27342] bond10: option fail_over_mac: invalid value (16) [ 710.223582][T27342] bond10 (unregistering): Released all slaves [ 710.996924][T27381] __nla_validate_parse: 70 callbacks suppressed [ 710.996980][T27381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5441'. [ 711.049756][T27383] netlink: 'syz.3.5442': attribute type 2 has an invalid length. [ 711.728305][T27409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5451'. [ 712.168211][T27425] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 712.459052][T27444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5459'. [ 712.530880][T27446] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 712.535986][T27446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5458'. [ 712.536013][T27446] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5458'. [ 712.536063][T27446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5458'. [ 712.611816][T27446] bridge_slave_1: entered promiscuous mode [ 712.615553][T27446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5458'. [ 712.689338][T27446] bridge_slave_1 (unregistering): left promiscuous mode [ 712.756051][T27462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5465'. [ 712.771809][T27462] netlink: 'syz.0.5465': attribute type 5 has an invalid length. [ 712.771852][T27462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5465'. [ 712.847503][T27416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5451'. [ 712.883243][T27460] netlink: 'syz.4.5464': attribute type 1 has an invalid length. [ 713.509167][T27490] nbd: nbd2 already in use [ 713.511927][T27490] nbd: nbd2 already in use [ 713.512375][T27490] nbd: must specify an index to disconnect [ 713.775484][T27500] netlink: 'syz.0.5475': attribute type 39 has an invalid length. [ 714.007253][T27515] veth7: entered allmulticast mode [ 714.247447][T27535] netlink: 'syz.4.5484': attribute type 10 has an invalid length. [ 714.377527][T27541] netlink: 'syz.1.5486': attribute type 29 has an invalid length. [ 714.973491][T27558] ªªªªª»: renamed from dummy0 (while UP) [ 715.597397][T27601] netlink: set zone limit has 4 unknown bytes [ 715.636976][T27603] netlink: zone id is out of range [ 715.637005][T27603] netlink: zone id is out of range [ 715.637042][T27603] netlink: zone id is out of range [ 715.637350][T27603] netlink: set zone limit has 4 unknown bytes [ 716.029021][T27616] xt_TCPMSS: Only works on TCP SYN packets [ 716.053302][T27616] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 716.058336][T27616] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 716.132394][T27623] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 716.250711][T27621] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 716.253559][T27621] bond10 (unregistering): Released all slaves [ 716.375112][T27630] __nla_validate_parse: 7 callbacks suppressed [ 716.375149][T27630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5513'. [ 716.433490][T27635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5515'. [ 716.450608][T27633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.574123][T27640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5513'. [ 716.718989][T27644] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5516'. [ 716.851697][T27654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5519'. [ 716.887138][T27653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5519'. [ 716.903006][T27653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5519'. [ 716.934741][T27653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5519'. [ 716.957429][T27653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5519'. [ 716.983893][T27653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5519'. [ 717.139063][T27666] netlink: 'syz.0.5518': attribute type 15 has an invalid length. [ 717.139089][T27666] netlink: 'syz.0.5518': attribute type 7 has an invalid length. [ 717.187617][T27664] netdevsim netdevsim3: Direct firmware load for ÿ failed with error -2 [ 717.187692][T27664] netdevsim netdevsim3: Falling back to sysfs fallback for: ÿ [ 717.394166][T27668] : renamed from team_slave_0 [ 718.166576][T27695] syzkaller0: entered promiscuous mode [ 718.166601][T27695] syzkaller0: entered allmulticast mode [ 718.722435][T27734] netlink: 'syz.4.5541': attribute type 1 has an invalid length. [ 718.867599][T27736] 8021q: adding VLAN 0 to HW filter on device bond12 [ 718.892708][T27736] bond11: (slave bond12): making interface the new active one [ 718.893321][T27736] bond11: (slave bond12): Enslaving as an active interface with an up link [ 719.025742][T27736] 8021q: adding VLAN 0 to HW filter on device bond11 [ 720.254496][T27802] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 721.187766][T27849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.371598][T27859] netlink: 'syz.0.5569': attribute type 83 has an invalid length. [ 721.655134][T27882] __nla_validate_parse: 44 callbacks suppressed [ 721.655157][T27882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5575'. [ 721.655887][T27883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5575'. [ 721.703448][T27885] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5573'. [ 721.814918][T27889] tipc: Enabled bearer , priority 0 [ 721.815737][T27889] syzkaller0: entered promiscuous mode [ 721.815757][T27889] syzkaller0: entered allmulticast mode [ 721.914815][T27889] tipc: Resetting bearer [ 721.935269][T27888] tipc: Resetting bearer [ 722.046903][T27888] tipc: Disabling bearer [ 722.516823][T27908] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 722.845075][T27919] sctp: [Deprecated]: syz.0.5589 (pid 27919) Use of int in maxseg socket option. [ 722.845075][T27919] Use struct sctp_assoc_value instead [ 723.421352][T27944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5597'. [ 723.432960][T27944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5597'. [ 723.432987][T27944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5597'. [ 723.437596][T27944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5597'. [ 723.437622][T27944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5597'. [ 723.948212][T27957] nftables ruleset with unbound set [ 723.987562][T27958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5602'. [ 723.987596][T27958] openvswitch: netlink: Flow key attr not present in new flow. [ 724.124813][T27964] tipc: New replicast peer: 255.255.255.255 [ 724.125708][T27964] tipc: Enabled bearer , priority 10 [ 724.254141][T27972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5606'. [ 724.955428][T28005] mac80211_hwsim hwsim41 syzkaller0: left promiscuous mode [ 724.955460][T28005] mac80211_hwsim hwsim41 syzkaller0: left allmulticast mode [ 725.240987][T26607] tipc: Node number set to 883405319 [ 725.329079][T28016] ip6gre4: entered allmulticast mode [ 725.706552][T28036] netlink: Failed to add ¦â—k\ helper -22 [ 725.706624][T28036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.796438][T28042] netlink: Failed to add ¦â—k\ helper -22 [ 725.796498][T28042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.328429][T28063] netlink: set zone limit has 4 unknown bytes [ 726.414447][T28062] syzkaller1: entered promiscuous mode [ 726.416677][T28062] syzkaller1: entered allmulticast mode [ 727.068518][T28086] nbd: couldn't find device at index 15663104 [ 727.297583][T28098] x_tables: duplicate underflow at hook 1 [ 727.562195][T28107] batman_adv: batadv0: Adding interface: gretap0 [ 727.562216][T28107] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.562251][T28107] batman_adv: batadv0: Interface activated: gretap0 [ 727.616156][T28109] __nla_validate_parse: 72 callbacks suppressed [ 727.616206][T28109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5646'. [ 727.888743][T28116] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5648'. [ 728.197662][T28135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5649'. [ 728.454027][T28146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 728.454048][T28146] IPv6: NLM_F_CREATE should be set when creating new route [ 728.454137][T28146] IPv6: NLM_F_CREATE should be set when creating new route [ 728.454163][T28146] IPv6: NLM_F_CREATE should be set when creating new route [ 728.457546][T28146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 728.653841][T28133] lo speed is unknown, defaulting to 1000 [ 728.677132][T28133] wg0 speed is unknown, defaulting to 1000 [ 729.220055][T28162] 8021q: adding VLAN 0 to HW filter on device bond10 [ 729.300645][T28167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5659'. [ 729.300684][T28167] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5659'. [ 729.406582][T28140] xt_cgroup: no path or classid specified [ 729.473676][T28171] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5660'. [ 729.687949][T28175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5662'. [ 729.765417][T28177] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5663'. [ 729.769384][T28178] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5663'. [ 729.793319][T28177] openvswitch: netlink: Missing key (keys=40, expected=100) [ 730.136254][T28186] netlink: 'syz.1.5667': attribute type 12 has an invalid length. [ 730.202732][T28191] netlink: 'syz.0.5669': attribute type 11 has an invalid length. [ 730.207947][T28188] xt_esp: unknown flags DD [ 730.404239][T28186] bond11: option primary_reselect: invalid value (255) [ 730.414671][T28186] bond11 (unregistering): Released all slaves [ 730.534101][T28200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5670'. [ 730.597027][T28200] macvlan2: entered promiscuous mode [ 730.597053][T28200] macvlan2: entered allmulticast mode [ 730.911604][T28210] netlink: 'syz.1.5672': attribute type 2 has an invalid length. [ 730.932066][T28218] netlink: 'syz.4.5674': attribute type 23 has an invalid length. [ 731.272510][T28232] netlink: 'syz.2.5678': attribute type 14 has an invalid length. [ 731.272535][T28232] netlink: 'syz.2.5678': attribute type 13 has an invalid length. [ 731.706991][T28251] netlink: 'syz.0.5681': attribute type 58 has an invalid length. [ 732.064940][T28258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.065478][T28258] bond0: (slave gtp1): The slave device specified does not support setting the MAC address [ 732.065502][T28258] bond0: (slave gtp1): Setting fail_over_mac to active for active-backup mode [ 732.126398][T28258] bond0: (slave gtp1): making interface the new active one [ 732.126428][T28258] gtp1: entered promiscuous mode [ 732.142670][T28258] bond0: (slave gtp1): Enslaving as an active interface with an up link [ 732.426471][T28268] netlink: 'syz.0.5687': attribute type 39 has an invalid length. [ 733.020615][T28288] netlink: 'syz.3.5694': attribute type 32 has an invalid length. [ 733.020648][T28288] __nla_validate_parse: 6 callbacks suppressed [ 733.020666][T28288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5694'. [ 733.116960][T28288] bond5: option coupled_control: invalid value (192) [ 733.129292][T28288] bond5 (unregistering): Released all slaves [ 733.368924][T28295] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5696'. [ 733.567971][T28301] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5696'. [ 733.727128][T28304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5699'. [ 733.831468][T28306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5698'. [ 733.831495][T28306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5698'. [ 733.832682][T28306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5698'. [ 733.832704][T28306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5698'. [ 733.913007][T28316] netlink: 'syz.1.5701': attribute type 10 has an invalid length. [ 733.937658][T28316] bridge0: port 3(veth0) entered disabled state [ 733.940737][T28316] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.971990][T28317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5701'. [ 734.048518][T28317] veth0: left allmulticast mode [ 734.048578][T28317] veth0: left promiscuous mode [ 734.048834][T28317] bridge0: port 3(veth0) entered disabled state [ 734.078942][T28317] bridge_slave_1: left allmulticast mode [ 734.078982][T28317] bridge_slave_1: left promiscuous mode [ 734.089115][T28317] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.287687][T28317] bridge0 (unregistering): left allmulticast mode [ 734.416912][T28328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5703'. [ 734.434118][T28326] nbd: must specify at least one socket [ 735.161023][T28359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.171568][T28359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.250902][T28363] tc_dump_action: action bad kind [ 735.251237][T28363] tc_dump_action: action bad kind [ 735.251402][T28363] tc_dump_action: action bad kind [ 735.251532][T28363] tc_dump_action: action bad kind [ 735.251659][T28363] tc_dump_action: action bad kind [ 735.251784][T28363] tc_dump_action: action bad kind [ 735.251911][T28363] tc_dump_action: action bad kind [ 735.252149][T28363] tc_dump_action: action bad kind [ 735.252341][T28363] tc_dump_action: action bad kind [ 735.252467][T28363] tc_dump_action: action bad kind [ 735.252598][T28363] tc_dump_action: action bad kind [ 735.257024][T28363] tc_dump_action: action bad kind [ 735.278259][T28363] tc_dump_action: action bad kind [ 735.278818][T28363] tc_dump_action: action bad kind [ 735.365684][T28363] tc_dump_action: action bad kind [ 735.380524][T28363] tc_dump_action: action bad kind [ 735.380671][T28363] tc_dump_action: action bad kind [ 735.380820][T28363] tc_dump_action: action bad kind [ 735.381003][T28363] tc_dump_action: action bad kind [ 735.381214][T28363] tc_dump_action: action bad kind [ 735.382150][T28363] tc_dump_action: action bad kind [ 735.396589][T28363] tc_dump_action: action bad kind [ 735.397248][T28363] tc_dump_action: action bad kind [ 735.414323][T28363] tc_dump_action: action bad kind [ 735.415242][T28363] tc_dump_action: action bad kind [ 735.415766][T28363] tc_dump_action: action bad kind [ 735.426348][T28363] tc_dump_action: action bad kind [ 735.436887][T28363] tc_dump_action: action bad kind [ 735.442338][T28363] tc_dump_action: action bad kind [ 735.442543][T28363] tc_dump_action: action bad kind [ 735.443026][T28363] tc_dump_action: action bad kind [ 735.443622][T28363] tc_dump_action: action bad kind [ 735.444255][T28363] tc_dump_action: action bad kind [ 737.032453][T28482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 738.591891][T28586] v: renamed from veth0_vlan [ 738.892893][T28597] veth0: entered promiscuous mode [ 738.899413][T28597] __nla_validate_parse: 108 callbacks suppressed [ 738.916462][T28597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5734'. [ 738.964952][T28597] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5734'. [ 739.077624][T28596] veth0: left promiscuous mode [ 739.145271][T28606] validate_nla: 2 callbacks suppressed [ 739.145292][T28606] netlink: 'syz.3.5737': attribute type 58 has an invalid length. [ 739.145322][T28606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5737'. [ 739.854448][T28626] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5740'. [ 740.128477][T28653] netlink: 'syz.2.5745': attribute type 1 has an invalid length. [ 740.138347][T28654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5745'. [ 740.202405][T28657] netlink: 'syz.2.5745': attribute type 7 has an invalid length. [ 740.202429][T28657] netlink: 'syz.2.5745': attribute type 8 has an invalid length. [ 740.598484][T28664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5746'. [ 740.796355][T28667] syzkaller1: entered promiscuous mode [ 740.796379][T28667] syzkaller1: entered allmulticast mode [ 741.033319][T28681] netlink: 'syz.2.5749': attribute type 4 has an invalid length. [ 741.298874][ T5280] v: left promiscuous mode [ 741.557839][T17948] v: entered promiscuous mode [ 742.085836][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 742.250705][T28724] netlink: 'syz.3.5760': attribute type 64 has an invalid length. [ 742.250730][T28724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5760'. [ 743.384047][T28774] ip6t_rpfilter: unknown options [ 743.406470][T28774] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5775'. [ 743.406883][T28771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5773'. [ 743.406908][T28771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5773'. [ 743.779836][T28789] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 744.012653][T28796] netlink: 'syz.3.5780': attribute type 21 has an invalid length. [ 744.012742][T28796] __nla_validate_parse: 1 callbacks suppressed [ 744.012761][T28796] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5780'. [ 744.115808][T28795] sctp: [Deprecated]: syz.0.5781 (pid 28795) Use of struct sctp_assoc_value in delayed_ack socket option. [ 744.115808][T28795] Use struct sctp_sack_info instead [ 744.115975][T28799] netlink: 896 bytes leftover after parsing attributes in process `syz.0.5781'. [ 744.333908][T28812] netlink: 'syz.4.5785': attribute type 29 has an invalid length. [ 744.764798][T28841] netlink: 'syz.4.5790': attribute type 1 has an invalid length. [ 744.764824][T28841] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.5790'. [ 745.027883][T28851] openvswitch: netlink: Missing key (keys=40, expected=100) [ 745.095196][T28855] netlink: 'syz.0.5795': attribute type 1 has an invalid length. [ 745.150447][T28859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5797'. [ 745.150494][T28859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5797'. [ 745.182907][T28859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5797'. [ 745.182945][T28859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5797'. [ 745.211879][T28859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5797'. [ 745.211918][T28859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5797'. [ 745.246088][T28868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5797'. [ 746.513349][T28936] netlink: 'syz.3.5811': attribute type 8 has an invalid length. [ 746.748556][T28949] netlink: 'syz.1.5815': attribute type 21 has an invalid length. [ 746.748628][T28949] netlink: 'syz.1.5815': attribute type 5 has an invalid length. [ 746.784055][ T31] audit: type=1107 audit(1790671101.448:17): pid=28946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ªø Ýâ)L„ø£lâô@ N‘H Ñ„XóšNQFBW-^�ÍØKª¦|qÑN° [ 746.784055][ T31] Á¬e­f¬Ò*��ÿØš¼;øa‚>Ø&ôñË ˜úSY,î|@U]•�î' [ 746.836856][T28949] netlink: 'syz.1.5815': attribute type 4 has an invalid length. [ 747.033134][T28958] tipc: Failed to remove unknown binding: 66,0,0/1824479209:1625806075/1625806076 [ 747.035575][T28958] tipc: Failed to remove unknown binding: 66,0,0/1824479209:1625806075/1625806076 [ 747.462654][T28980] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 748.090731][T29006] netlink: 'syz.3.5834': attribute type 1 has an invalid length. [ 748.201571][T29006] 8021q: adding VLAN 0 to HW filter on device bond5 [ 748.232980][T29012] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 748.310872][T25702] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 748.420841][T25648] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 748.588375][T29017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.968244][T29036] xt_l2tp: missing protocol rule (udp|l2tpip) [ 749.205687][T29047] __nla_validate_parse: 14 callbacks suppressed [ 749.205711][T29047] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5847'. [ 749.334042][T29050] syzkaller1: entered promiscuous mode [ 749.334068][T29050] syzkaller1: entered allmulticast mode [ 749.421785][T29055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5850'. [ 750.123769][T29084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5860'. [ 750.576428][T29106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.632462][T29107] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 750.653108][T29107] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 750.654466][T29110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.783489][T29110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.883425][T29110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.952154][T29125] netlink: 'syz.3.5873': attribute type 1 has an invalid length. [ 750.952208][T29125] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5873'. [ 751.094445][T29130] Bluetooth: hci0: unsupported parameter 5135 [ 751.094464][T29130] Bluetooth: hci0: unsupported parameter 8192 [ 751.094475][T29130] Bluetooth: hci0: unsupported parameter 5135 [ 751.094485][T29130] Bluetooth: hci0: unsupported parameter 8192 [ 751.096994][T29132] Bluetooth: hci0: unsupported parameter 5135 [ 751.097018][T29132] Bluetooth: hci0: unsupported parameter 8192 [ 751.097033][T29132] Bluetooth: hci0: unsupported parameter 5135 [ 751.097048][T29132] Bluetooth: hci0: unsupported parameter 8192 [ 751.358001][T29140] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5877'. [ 751.513648][T29143] bridge0: port 1(syz_tun) entered blocking state [ 751.515013][T29143] bridge0: port 1(syz_tun) entered disabled state [ 751.540809][T29143] syz_tun: entered promiscuous mode [ 751.542026][T29143] bridge0: port 1(syz_tun) entered blocking state [ 751.759777][T29155] IPVS: set_ctl: invalid protocol: 50 172.20.20.29:20003 [ 752.057804][T29159] batadv_slave_0: entered promiscuous mode [ 752.372811][T29169] x_tables: duplicate underflow at hook 1 [ 752.557467][T29175] netlink: 'syz.3.5885': attribute type 10 has an invalid length. [ 752.557494][T29175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5885'. [ 752.672434][T29158] batadv_slave_0: left promiscuous mode [ 752.874393][ T4935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 752.887545][ T4935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 752.901720][ T4935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 752.902832][ T4935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 752.903567][ T4935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 753.373438][T29186] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 753.571579][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 753.596797][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 753.608852][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 753.824275][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 753.825781][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 753.857159][T29196] netlink: 'syz.0.5891': attribute type 3 has an invalid length. [ 753.857280][T29196] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5891'. [ 754.564583][T29221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5892'. [ 754.602227][T29216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5892'. [ 754.606546][T29216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5892'. [ 755.011483][T29236] bridge0: port 2(vlan0) entered blocking state [ 755.011612][T29236] bridge0: port 2(vlan0) entered disabled state [ 755.011802][T29236] vlan0: entered allmulticast mode [ 755.011820][T29236] geneve0: entered allmulticast mode [ 755.051436][T29236] vlan0: entered promiscuous mode [ 755.051462][T29236] geneve0: entered promiscuous mode [ 755.231483][T29242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5897'. [ 755.608920][T29182] lo speed is unknown, defaulting to 1000 [ 755.627735][T29182] wg0 speed is unknown, defaulting to 1000 [ 755.920404][ T52] Bluetooth: hci1: command tx timeout [ 756.556566][T29268] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 756.673571][T29292] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5904'. [ 756.776596][T29297] netlink: 'syz.4.5907': attribute type 1 has an invalid length. [ 756.903221][T29304] netlink: 'syz.3.5906': attribute type 3 has an invalid length. [ 756.903246][T29304] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5906'. [ 756.918289][T29306] netlink: 'syz.3.5906': attribute type 3 has an invalid length. [ 756.918351][T29306] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5906'. [ 757.026725][T29297] 8021q: adding VLAN 0 to HW filter on device bond14 [ 757.663049][T29341] netlink: 'syz.4.5913': attribute type 1 has an invalid length. [ 757.724097][T29347] netlink: 'syz.0.5914': attribute type 1 has an invalid length. [ 757.800819][T29341] 8021q: adding VLAN 0 to HW filter on device bond15 [ 757.908768][T29342] bond15: (slave dummy0): making interface the new active one [ 757.941709][T29342] bond15: (slave dummy0): Enslaving as an active interface with an up link [ 757.941821][T29346] : renamed from dummy0 (while UP) [ 758.000819][ T52] Bluetooth: hci1: command tx timeout [ 758.313364][T17948] hid-generic 0005:07C0:0009.0002: item fetching failed at offset 0/1 [ 758.314791][T17948] hid-generic 0005:07C0:0009.0002: probe with driver hid-generic failed with error -22 [ 758.452145][T29383] netlink: 'syz.4.5921': attribute type 2 has an invalid length. [ 758.535719][T29182] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.538472][T29182] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.538863][T29182] bridge_slave_0: entered allmulticast mode [ 758.570515][T29182] bridge_slave_0: entered promiscuous mode [ 758.594220][T29182] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.594408][T29182] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.594582][T29182] bridge_slave_1: entered allmulticast mode [ 758.623104][T29182] bridge_slave_1: entered promiscuous mode [ 758.774035][T29391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5925'. [ 758.774073][T29391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5925'. [ 758.810727][T29182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.832604][T29391] erspan0: entered promiscuous mode [ 758.833991][T29391] gretap0: entered promiscuous mode [ 758.867589][T29182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.952109][T29182] team0: Port device team_slave_0 added [ 758.957396][T29182] team0: Port device team_slave_1 added [ 759.022542][T29182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.022562][T29182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.022591][T29182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.028388][T29182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.028408][T29182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.028437][T29182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.262733][T29182] hsr_slave_0: entered promiscuous mode [ 759.275955][T29182] hsr_slave_1: entered promiscuous mode [ 759.652349][T29417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5933'. [ 759.711461][T29417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5933'. [ 759.921470][T29431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5935'. [ 760.042437][T29182] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.082112][ T52] Bluetooth: hci1: command tx timeout [ 760.147034][T29438] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5936'. [ 760.185108][T29438] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5936'. [ 760.402533][T29182] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.626456][T29182] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.811481][T29461] netlink: 4384 bytes leftover after parsing attributes in process `syz.0.5943'. [ 760.920639][T29468] ip_tables: iptables: counters copy to user failed while replacing table [ 761.138102][T29473] openvswitch: netlink: Missing key (keys=40, expected=100) [ 761.151038][T29182] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.158812][T29474] openvswitch: netlink: Missing key (keys=40, expected=100) [ 761.201235][T29475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5945'. [ 761.397140][T29485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5949'. [ 761.424962][T29482] pim6reg: entered allmulticast mode [ 761.427550][T29481] veth0_to_team: entered promiscuous mode [ 761.564413][T29488] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5950'. [ 761.725811][T29488] bond11 (unregistering): Released all slaves [ 762.034356][T29182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 762.054745][T29182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 762.056391][T29182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 762.081154][T29182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 762.086485][T29182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 762.117123][T29182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 762.118966][T29182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 762.159916][ T52] Bluetooth: hci1: command tx timeout [ 762.168680][T29182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 762.393195][T29526] netlink: 'syz.4.5956': attribute type 1 has an invalid length. [ 762.446829][T29531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5956'. [ 762.533561][T29530] xt_CT: No such helper "pptp" [ 762.565762][T29526] 8021q: adding VLAN 0 to HW filter on device bond16 [ 762.678248][T29182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.717960][T29182] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.736367][T25659] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.736481][T25659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.783575][T25659] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.783684][T25659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.700501][T29567] lo: entered promiscuous mode [ 763.788274][T29567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 764.136464][T29588] netlink: 'syz.3.5969': attribute type 21 has an invalid length. [ 764.242519][T29591] netlink: 'syz.3.5969': attribute type 21 has an invalid length. [ 764.283867][T29182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.412948][T29182] veth0_vlan: entered promiscuous mode [ 764.543657][T29182] veth1_vlan: entered promiscuous mode [ 764.735248][T29182] veth0_macvtap: entered promiscuous mode [ 764.758220][T29182] veth1_macvtap: entered promiscuous mode [ 764.826737][T29182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.873181][T29182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.993003][T29622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.993128][T29622] batadv_slave_0: entered promiscuous mode [ 765.020994][T25686] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.021578][T25686] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.021626][T25686] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.021666][T25686] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.085987][T29624] __nla_validate_parse: 7 callbacks suppressed [ 765.086012][T29624] netlink: 760 bytes leftover after parsing attributes in process `syz.1.5977'. [ 765.261467][T29626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5978'. [ 765.347457][T29628] IPv6: addrconf: prefix option has invalid lifetime [ 765.580322][T25706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.580347][T25706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.848851][T25706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.848882][T25706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.072856][T29667] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5983'. [ 767.200559][T29667] netlink: 'syz.1.5983': attribute type 10 has an invalid length. [ 767.200722][T29667] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 767.208496][T25686] IPVS: starting estimator thread 0... [ 767.290041][T29669] IPVS: using max 24 ests per chain, 57600 per kthread [ 770.253316][T29693] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5990'. [ 770.303342][T29695] ip_tables: iptables: counters copy to user failed while replacing table [ 770.460687][T29700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5992'. [ 770.460714][T29700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5992'. [ 770.473935][T29700] netlink: 31 bytes leftover after parsing attributes in process `syz.4.5992'. [ 770.604607][T29710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5995'. [ 771.066444][T29730] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 771.207222][T29733] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6000'. [ 771.675243][T29750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6003'. [ 771.675286][T29750] netlink: 'syz.4.6003': attribute type 7 has an invalid length. [ 771.675303][T29750] netlink: 'syz.4.6003': attribute type 8 has an invalid length. [ 771.675318][T29750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6003'. [ 771.726531][T29751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6004'. [ 771.748339][T29751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6004'. [ 771.923736][T29756] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 772.044431][T29768] openvswitch: netlink: Invalid VLAN frame [ 772.193365][T29772] syzkaller1: entered promiscuous mode [ 772.193389][T29772] syzkaller1: entered allmulticast mode [ 772.238567][T29772] bond11: option downdelay: invalid value (18446744073709551615) [ 772.238596][T29772] bond11: option downdelay: allowed values 0 - 2147483647 [ 772.257636][T29772] bond11 (unregistering): Released all slaves [ 772.362118][T29781] bond11: option downdelay: invalid value (18446744073709551615) [ 772.362182][T29781] bond11: option downdelay: allowed values 0 - 2147483647 [ 772.364042][T29781] bond11 (unregistering): Released all slaves [ 773.267377][T29824] netlink: 'syz.2.6022': attribute type 1 has an invalid length. [ 773.766955][T29844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 773.818055][T29844] 8021q: adding VLAN 0 to HW filter on device bond8 [ 773.833889][T29844] 8021q: adding VLAN 0 to HW filter on device bond9 [ 773.913644][T29852] syzkaller1: entered promiscuous mode [ 773.913670][T29852] syzkaller1: entered allmulticast mode [ 773.968109][T25706] bond5: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 774.052630][T29857] ip_tables: iptables: counters copy to user failed while replacing table [ 774.820470][T29882] Cannot find map_set index 135 as target [ 775.270335][T29890] ip_tables: iptables: counters copy to user failed while replacing table [ 775.712463][T29924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.841261][T29924] 8021q: adding VLAN 0 to HW filter on device bond7 [ 776.177867][T29945] __nla_validate_parse: 9 callbacks suppressed [ 776.177888][T29945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6058'. [ 776.246383][T29947] Cannot find del_set index 4 as target [ 776.289369][T29947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6060'. [ 776.868850][T29966] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6065'. [ 777.815008][T30023] syzkaller0: entered promiscuous mode [ 777.815033][T30023] syzkaller0: entered allmulticast mode [ 777.979087][T30030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6080'. [ 778.014302][T30030] x_tables: duplicate underflow at hook 1 [ 778.105518][T30043] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 778.428015][ T4935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 778.438305][ T4935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 778.445693][ T4935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 778.455238][ T4935] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 778.459355][ T4935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 778.621908][T30057] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6086'. [ 779.350379][T30094] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 779.531759][T30045] lo speed is unknown, defaulting to 1000 [ 779.533682][T30045] wg0 speed is unknown, defaulting to 1000 [ 780.560118][ T52] Bluetooth: hci4: command tx timeout [ 780.813959][T25647] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.813998][T25647] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.814028][T25647] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 780.814056][T25647] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 40905 - 0 [ 780.924395][T30045] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.924594][T30045] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.925385][T30045] bridge_slave_0: entered allmulticast mode [ 780.927447][T30045] bridge_slave_0: entered promiscuous mode [ 780.966038][T30045] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.966183][T30045] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.966348][T30045] bridge_slave_1: entered allmulticast mode [ 780.969024][T30045] bridge_slave_1: entered promiscuous mode [ 781.028236][T30126] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6098'. [ 781.043946][T30045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.075388][T25647] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 781.075429][T25647] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.075457][T25647] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 781.075489][T25647] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 40905 - 0 [ 781.137068][T30045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.173731][T30045] team0: Port device team_slave_0 added [ 781.176683][T30045] team0: Port device team_slave_1 added [ 781.224643][T30045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.224660][T30045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.224698][T30045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.312815][T25647] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 781.312869][T25647] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.312909][T25647] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 781.312937][T25647] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 40905 - 0 [ 781.367823][T30045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.367843][T30045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.367873][T30045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.386666][T30129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6099'. [ 781.477003][T25647] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 781.477047][T25647] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.477075][T25647] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 781.477103][T25647] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 40905 - 0 [ 781.576517][T30066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 781.578095][T30045] hsr_slave_0: entered promiscuous mode [ 781.579408][T30045] hsr_slave_1: entered promiscuous mode [ 781.604874][T30045] debugfs: 'hsr0' already exists in 'hsr' [ 781.604901][T30045] Cannot create hsr debugfs directory [ 781.718642][T30133] x_tables: duplicate underflow at hook 2 [ 781.851407][T30135] ip_tables: iptables: counters copy to user failed while replacing table [ 782.261623][T30152] netlink: 'syz.3.6107': attribute type 2 has an invalid length. [ 782.302723][T30156] netlink: 'syz.1.6106': attribute type 10 has an invalid length. [ 782.398298][T30156] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.418608][T30156] team0: entered promiscuous mode [ 782.418631][T30156] team_slave_0: entered promiscuous mode [ 782.433108][T30156] team_slave_1: entered promiscuous mode [ 782.433570][T30156] team0: entered allmulticast mode [ 782.433586][T30156] team_slave_0: entered allmulticast mode [ 782.433602][T30156] team_slave_1: entered allmulticast mode [ 782.434620][T30156] bond0: (slave team0): Enslaving as an active interface with an up link [ 782.533395][T30165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6108'. [ 782.567951][T30161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6109'. [ 782.568962][T25647] bridge_slave_1: left allmulticast mode [ 782.568988][T25647] bridge_slave_1: left promiscuous mode [ 782.569243][T25647] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.607127][T25647] bridge_slave_0: left allmulticast mode [ 782.607183][T25647] bridge_slave_0: left promiscuous mode [ 782.610437][T25647] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.640498][ T52] Bluetooth: hci4: command tx timeout [ 782.724857][T25647] pim6reg: left allmulticast mode [ 782.725390][T25647] lo: left allmulticast mode [ 783.198464][T25647] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 783.483629][T25647] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 783.696016][T25647] bond6 (unregistering): (slave bridge8): Releasing backup interface [ 783.721809][T25647] bond9 (unregistering): (slave bridge10): Releasing active interface [ 783.721836][T25647] bond9 (unregistering): (slave bridge10): the permanent HWaddr of slave - 12:74:ba:0c:1b:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 783.755695][T25647] bond9 (unregistering): (slave bridge11): Releasing active interface [ 783.794942][T25647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.797808][T25647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.820816][T25647] bond0 (unregistering): Released all slaves [ 783.833961][T25647] bond1 (unregistering): (slave veth3): Releasing backup interface [ 783.835780][T25647] bond1 (unregistering): Released all slaves [ 783.873246][T25647] bond2 (unregistering): Released all slaves [ 783.892103][T25647] bond3 (unregistering): Released all slaves [ 783.908733][T25647] bond4 (unregistering): (slave bond5): Releasing backup interface [ 783.921855][T25647] bond4 (unregistering): Released all slaves [ 783.944625][T25647] bond5 (unregistering): Released all slaves [ 783.965804][T25647] bond6 (unregistering): Released all slaves [ 783.984713][T25647] bond7 (unregistering): Released all slaves [ 784.007475][T25647] bond8 (unregistering): Released all slaves [ 784.035771][T25647] bond9 (unregistering): Released all slaves [ 784.053980][T25647] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 784.055734][T25647] bond10 (unregistering): Released all slaves [ 784.093196][T25647] bond11 (unregistering): (slave bond12): Releasing backup interface [ 784.093964][T25647] bond11 (unregistering): Released all slaves [ 784.117885][T25647] bond12 (unregistering): Released all slaves [ 784.145759][T25647] bond13 (unregistering): Released all slaves [ 784.163359][T25647] bond14 (unregistering): Released all slaves [ 784.182568][T25647] bond15 (unregistering): (slave ): Releasing active interface [ 784.187758][T25647] bond15 (unregistering): Released all slaves [ 784.225003][T25647] bond16 (unregistering): Released all slaves [ 784.245406][T30165] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 784.594863][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 784.628656][T25647] ovs-s: left promiscuous mode [ 784.723269][ T52] Bluetooth: hci4: command tx timeout [ 784.977392][T25647] tipc: Disabling bearer [ 784.977539][T25647] tipc: Left network mode [ 785.103548][T25647] IPVS: stopping master sync thread 22810 ... [ 785.820502][ T52] Bluetooth: hci1: ISO packet too small [ 786.052453][T30268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6122'. [ 786.130100][T30273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6125'. [ 786.168921][T30273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6125'. [ 786.209217][T30275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6124'. [ 786.801085][ T52] Bluetooth: hci4: command tx timeout [ 786.853889][T30304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6130'. [ 786.939962][T30308] syzkaller0: entered promiscuous mode [ 786.939988][T30308] syzkaller0: entered allmulticast mode [ 786.945331][T30309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6130'. [ 786.985297][T30309] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 786.985348][T30309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.018842][T30302] Bluetooth: hci0: unsupported parameter 5135 [ 787.018871][T30302] Bluetooth: hci0: unsupported parameter 8192 [ 787.018886][T30302] Bluetooth: hci0: unsupported parameter 5135 [ 787.018900][T30302] Bluetooth: hci0: unsupported parameter 8192 [ 787.295491][T30320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6128'. [ 787.420369][T30323] netlink: 'syz.0.6132': attribute type 1 has an invalid length. [ 787.602038][T25647] hsr_slave_0: left promiscuous mode [ 787.604691][T25647] hsr_slave_1: left promiscuous mode [ 787.637623][T25647] veth1_macvtap: left promiscuous mode [ 787.637667][T25647] veth0_macvtap: left promiscuous mode [ 788.499873][T30045] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 788.505102][T30045] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 788.509426][T30045] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 788.567584][T30356] ip_tables: iptables: counters copy to user failed while replacing table [ 788.581848][T30045] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 788.584529][T30045] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 788.652257][T30045] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 788.673116][T30045] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 788.723979][T30045] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.874315][T30370] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 788.955371][T30045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.016833][T30045] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.043234][T25700] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.043380][T25700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.085661][T25700] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.085759][T25700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.276387][T30380] netlink: Unknown conntrack attr (0) [ 789.290078][T30380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6144'. [ 789.331209][T30381] Bluetooth: MGMT ver 1.23 [ 789.499026][T30381] wg0: entered promiscuous mode [ 789.499051][T30381] wg0: entered allmulticast mode [ 789.548266][T30388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6148'. [ 789.577131][T30383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6146'. [ 790.117529][T30420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6152'. [ 790.273800][T30431] ip6t_hbh: too many supported opts specified [ 790.380579][T30404] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6149'. [ 790.512107][T30396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 790.734590][T30444] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6157'. [ 791.030970][T30045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.175243][T30455] vlan2: entered allmulticast mode [ 791.175413][T30455] bond0: entered allmulticast mode [ 791.175432][T30455] bond_slave_0: entered allmulticast mode [ 791.175451][T30455] bond_slave_1: entered allmulticast mode [ 791.206550][T30463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6160'. [ 791.693711][T30486] ip_tables: iptables: counters copy to user failed while replacing table [ 792.143800][T30045] veth0_vlan: entered promiscuous mode [ 792.147832][T30504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.203676][T30045] veth1_vlan: entered promiscuous mode [ 792.241764][T30508] xt_hashlimit: size too large, truncated to 1048576 [ 792.368029][T30045] veth0_macvtap: entered promiscuous mode [ 792.416426][T30045] veth1_macvtap: entered promiscuous mode [ 792.476421][T30045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.532982][T30045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.651481][T25689] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.651904][T25689] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.651982][T25689] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.711674][T25648] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.856035][T25648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.856059][T25648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.894733][T30519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 793.072768][ T1423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.072793][ T1423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.144735][T30528] lo: entered promiscuous mode [ 793.145045][T30528] lo: left promiscuous mode [ 793.178750][T30530] lo: entered promiscuous mode [ 793.179109][T30526] lo: left promiscuous mode [ 793.195078][T30532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6173'. [ 793.259044][T30525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6174'. [ 793.529104][T30542] batman_adv: batadv0: Adding interface: gretap1 [ 793.529130][T30542] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.529187][T30542] batman_adv: batadv0: Interface activated: gretap1 [ 794.185853][ T4935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 794.202448][ T4935] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 794.208352][ T4935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 794.225672][ T4935] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 794.226411][ T4935] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 794.596248][T30578] team0 (unregistering): Port device team_slave_0 removed [ 794.681882][T30578] team0 (unregistering): Port device team_slave_1 removed [ 795.108466][T30598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6188'. [ 795.235196][T30607] xt_l2tp: invalid flags combination: 8 [ 795.413358][T30606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.413416][T30606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.414800][T30606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.414825][T30606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.415896][T30606] batman_adv: batadv0: Interface deactivated: gretap1 [ 795.415916][T30606] batman_adv: batadv0: Removing interface: gretap1 [ 795.416950][T30613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6193'. [ 795.772612][T30568] lo speed is unknown, defaulting to 1000 [ 795.798843][T30568] wg0 speed is unknown, defaulting to 1000 [ 795.996641][T30633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6199'. [ 796.221508][T30643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6200'. [ 796.290397][T30643] hsr_slave_1 (unregistering): left promiscuous mode [ 796.320719][ T52] Bluetooth: hci5: command tx timeout [ 796.341180][T30646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6200'. [ 796.515990][T30649] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6202'. [ 796.675309][T30649] team0 (unregistering): Port device team_slave_0 removed [ 796.712458][T30649] team0 (unregistering): Port device team_slave_1 removed [ 796.739312][T30630] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 796.739339][T30630] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 796.796226][T30648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.913263][T30630] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 796.913288][T30630] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 796.959382][T30666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6205'. [ 796.959406][T30666] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6205'. [ 797.071670][T30630] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 797.071697][T30630] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 797.109870][T30664] syzkaller0: entered promiscuous mode [ 797.109897][T30664] syzkaller0: entered allmulticast mode [ 797.222871][T30667] netlink: 'syz.2.6204': attribute type 49 has an invalid length. [ 797.523116][T30682] block nbd4: NBD_DISCONNECT [ 797.861016][T30568] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.866715][T30698] IPv6: Can't replace route, no match found [ 797.871623][T30568] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.872205][T30568] bridge_slave_0: entered allmulticast mode [ 797.900094][T30568] bridge_slave_0: entered promiscuous mode [ 797.921325][T30568] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.921446][T30568] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.921664][T30568] bridge_slave_1: entered allmulticast mode [ 797.927415][T30568] bridge_slave_1: entered promiscuous mode [ 797.966197][T30701] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 798.062451][T30568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.068615][T30568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.371873][T25702] IPVS: starting estimator thread 0... [ 800.668372][T30720] IPVS: using max 34 ests per chain, 81600 per kthread [ 800.699348][T30708] netlink: 'syz.2.6214': attribute type 1 has an invalid length. [ 800.699372][T30708] netlink: 'syz.2.6214': attribute type 3 has an invalid length. [ 800.699387][T30708] __nla_validate_parse: 3 callbacks suppressed [ 800.699399][T30708] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6214'. [ 800.812513][T30568] team0: Port device team_slave_0 added [ 800.833384][T30722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6218'. [ 801.038707][T30568] team0: Port device team_slave_1 added [ 801.088250][T30740] Bluetooth: hci0: unsupported parameter 5135 [ 801.088276][T30740] Bluetooth: hci0: unsupported parameter 8192 [ 801.088311][T30740] Bluetooth: hci0: unsupported parameter 5135 [ 801.088465][T30740] Bluetooth: hci0: unsupported parameter 8192 [ 801.237953][T30568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.237976][T30568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.238019][T30568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.283103][T30568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.283230][T30568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.283315][T30568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.611036][T30746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6221'. [ 801.684891][T30568] hsr_slave_0: entered promiscuous mode [ 801.698314][T30568] hsr_slave_1: entered promiscuous mode [ 801.707238][T30568] debugfs: 'hsr0' already exists in 'hsr' [ 801.707263][T30568] Cannot create hsr debugfs directory [ 801.727098][ T31] audit: type=1107 audit(1790671156.398:18): pid=30741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 801.845118][T30753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6223'. [ 802.169670][T30763] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6227'. [ 802.317869][T30767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6228'. [ 803.082175][T30785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6234'. [ 803.111086][T30789] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6236'. [ 803.353170][T30568] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.353212][T30568] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.612802][T30568] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.612842][T30568] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.971849][T30568] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 803.977910][T30568] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.977949][T30568] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.076754][T30827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6246'. [ 804.099668][T30828] netlink: 'syz.4.6245': attribute type 1 has an invalid length. [ 804.250186][T30835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6247'. [ 805.136383][T30568] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 805.156485][T30568] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 805.158392][T30568] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 805.185004][T30568] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 805.188057][T30568] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 805.223028][T30568] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 805.225904][T30568] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 805.256777][T30568] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 805.745235][T30568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.798557][T30568] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.826129][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.826272][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.892980][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.893126][ T5866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.133513][T30919] __nla_validate_parse: 7 callbacks suppressed [ 806.133535][T30919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6262'. [ 806.174064][T30928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6262'. [ 806.345128][T30936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6265'. [ 806.576481][T30957] netlink: 'syz.4.6267': attribute type 8 has an invalid length. [ 806.605103][T30958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6267'. [ 807.062757][T30977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.222801][T30983] bond1 (unregistering): Released all slaves [ 807.433840][T30568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.464322][T30996] x_tables: unsorted underflow at hook 1 [ 807.571400][T31002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6279'. [ 807.571433][T31002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6279'. [ 807.744819][T30568] veth0_vlan: entered promiscuous mode [ 807.767009][T30568] veth1_vlan: entered promiscuous mode [ 807.866273][T30568] veth0_macvtap: entered promiscuous mode [ 807.902945][T30568] veth1_macvtap: entered promiscuous mode [ 807.969211][T30568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.994356][T30568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.271428][T25706] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.271893][T25706] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.272401][T25706] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.272481][T25706] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.478442][T31021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6285'. [ 808.478496][T31021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6285'. [ 808.506322][T31021] netlink: 'syz.0.6285': attribute type 4 has an invalid length. [ 808.506347][T31021] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6285'. [ 808.634060][T31021] .`: renamed from bond0 (while UP) [ 808.717790][T25706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.717815][T25706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.796752][T25706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.796776][T25706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.840416][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050efa000: rx timeout, send abort [ 809.244424][T31054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6290'. [ 809.244462][T31054] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 809.341359][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033f6a400: rx timeout, send abort [ 809.341405][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050efa000: abort rx timeout. Force session deactivation [ 809.643947][ T4935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 809.663932][ T4935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 809.669120][ T4935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 809.688612][ T4935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 809.704730][ T4935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 809.841417][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033f6a400: abort rx timeout. Force session deactivation [ 810.293797][T18072] bridge0: port 1(syz_tun) entered disabled state [ 810.371328][T18072] syz_tun (unregistering): left allmulticast mode [ 810.371361][T18072] syz_tun (unregistering): left promiscuous mode [ 810.371471][T18072] bridge0: port 1(syz_tun) entered disabled state [ 810.373802][T18072] vlan0: left promiscuous mode [ 810.373825][T18072] geneve0: left promiscuous mode [ 810.753538][T31062] lo speed is unknown, defaulting to 1000 [ 810.754880][T31062] wg0 speed is unknown, defaulting to 1000 [ 811.292962][T31062] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.293105][T31062] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.293517][T31062] bridge_slave_0: entered allmulticast mode [ 811.295158][T31062] bridge_slave_0: entered promiscuous mode [ 811.306266][T31062] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.306814][T31062] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.307269][T31062] bridge_slave_1: entered allmulticast mode [ 811.329395][T31062] bridge_slave_1: entered promiscuous mode [ 811.387047][T31062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.405178][T31062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.451138][T31062] team0: Port device team_slave_0 added [ 811.453989][T31062] team0: Port device team_slave_1 added [ 811.494243][T31062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.494268][T31062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.494301][T31062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.496160][T31062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.496177][T31062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.496207][T31062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.649846][T31062] hsr_slave_0: entered promiscuous mode [ 811.651266][T31062] hsr_slave_1: entered promiscuous mode [ 811.652286][T31062] debugfs: 'hsr0' already exists in 'hsr' [ 811.652315][T31062] Cannot create hsr debugfs directory [ 811.762283][ T52] Bluetooth: hci2: command tx timeout [ 811.928240][T31062] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.928275][T31062] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.060810][T31062] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.060840][T31062] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.169209][T31062] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.169240][T31062] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.564531][T31059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 812.616897][T31062] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 812.700797][T31062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 812.701997][T31062] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 812.742820][T31062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 812.743902][T31062] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 812.782006][T31062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 812.786873][T31062] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 812.851774][T31062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 813.156488][T31135] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 813.168320][T31135] netlink: 'syz.3.6305': attribute type 12 has an invalid length. [ 813.208444][T31136] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 813.273226][T31062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.350450][T31062] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.377337][T25706] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.377465][T25706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.418390][T25659] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.418525][T25659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.506309][T31147] __nla_validate_parse: 2 callbacks suppressed [ 813.506329][T31147] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6308'. [ 813.629383][T31149] ip_tables: iptables: counters copy to user failed while replacing table [ 813.635779][T31151] sctp: [Deprecated]: syz.3.6310 (pid 31151) Use of int in max_burst socket option deprecated. [ 813.635779][T31151] Use struct sctp_assoc_value instead [ 813.841660][ T52] Bluetooth: hci2: command tx timeout [ 814.325144][T31179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6319'. [ 814.394274][T31184] erspan0: entered promiscuous mode [ 814.394336][T31184] erspan0: entered allmulticast mode [ 814.636834][T31194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6324'. [ 814.638976][T31194] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 814.668923][T31197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6325'. [ 814.745300][T31200] hsr0: entered allmulticast mode [ 814.745409][T31200] hsr_slave_0: entered allmulticast mode [ 814.745433][T31200] hsr_slave_1: entered allmulticast mode [ 814.758956][T31200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6326'. [ 814.767064][T31200] hsr_slave_0: left promiscuous mode [ 814.779193][T31200] hsr_slave_1: left promiscuous mode [ 814.854416][T31200] hsr0 (unregistering): left allmulticast mode [ 814.987550][T31206] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6329'. [ 814.989299][T31207] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6329'. [ 815.064766][T31062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.191883][T31062] veth0_vlan: entered promiscuous mode [ 815.230809][T31062] veth1_vlan: entered promiscuous mode [ 815.303985][T31062] veth0_macvtap: entered promiscuous mode [ 815.325594][T31062] veth1_macvtap: entered promiscuous mode [ 815.356460][T31062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.412278][T31062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.620438][ T6523] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.620493][ T6523] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.620530][ T6523] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.644214][ T6523] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.709179][T31234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6335'. [ 815.874893][ T289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.874918][ T289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.920823][ T52] Bluetooth: hci2: command tx timeout [ 815.961747][ T289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.961771][ T289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.258850][T31251] openvswitch: netlink: Flow key attr not present in new flow. [ 816.539000][T31264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6346'. [ 816.616823][T31268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 816.798512][T31274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6348'. [ 816.855576][T31276] tc_dump_action: action bad kind [ 817.999788][ T52] Bluetooth: hci2: command tx timeout [ 818.098850][T31332] netlink: 'syz.0.6361': attribute type 1 has an invalid length. [ 818.401051][T31341] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 818.744392][T31349] netlink: 'syz.2.6365': attribute type 12 has an invalid length. [ 818.744420][T31349] netlink: 'syz.2.6365': attribute type 29 has an invalid length. [ 818.744436][T31349] __nla_validate_parse: 5 callbacks suppressed [ 818.744448][T31349] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6365'. [ 818.744469][T31349] netlink: 'syz.2.6365': attribute type 1 has an invalid length. [ 818.744483][T31349] netlink: 'syz.2.6365': attribute type 2 has an invalid length. [ 818.744497][T31349] netlink: 11 bytes leftover after parsing attributes in process `syz.2.6365'. [ 819.102468][T31358] pimreg: entered allmulticast mode [ 819.157327][T31360] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 819.180313][T31360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6368'. [ 819.205826][T31362] syzkaller0: entered promiscuous mode [ 819.205882][T31362] syzkaller0: entered allmulticast mode [ 819.386160][T31371] netlink: zone id is out of range [ 819.386181][T31371] netlink: zone id is out of range [ 819.386192][T31371] netlink: zone id is out of range [ 819.386202][T31371] netlink: zone id is out of range [ 819.386212][T31371] netlink: zone id is out of range [ 819.386221][T31371] netlink: zone id is out of range [ 819.386235][T31371] netlink: zone id is out of range [ 819.386245][T31371] netlink: zone id is out of range [ 819.677742][T31390] netlink: 'syz.4.6375': attribute type 2 has an invalid length. [ 820.061808][T31409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6381'. [ 820.084458][T31409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6381'. [ 820.707111][T31439] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6389'. [ 821.289003][ T4935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 821.306072][ T4935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 821.308956][ T4935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 821.332091][ T4935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 821.338939][ T4935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 821.517561][T31464] Bluetooth: MGMT ver 1.23 [ 822.094707][T31475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6395'. [ 823.439819][ T52] Bluetooth: hci3: command tx timeout [ 824.318474][T31472] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 824.604857][T31481] netlink: 'syz.4.6397': attribute type 3 has an invalid length. [ 825.168395][T31456] lo speed is unknown, defaulting to 1000 [ 825.186983][T31456] wg0 speed is unknown, defaulting to 1000 [ 825.228922][T31502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6400'. [ 825.384079][T31505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6401'. [ 825.519737][ T52] Bluetooth: hci3: command tx timeout [ 825.589076][T31516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6405'. [ 825.913190][T31522] vlan0: entered promiscuous mode [ 825.913215][T31522] bridge0: entered promiscuous mode [ 826.346799][T31535] siw: device registration error -23 [ 826.705086][T31554] netlink: 'syz.0.6416': attribute type 83 has an invalid length. [ 826.876565][T31562] sctp: [Deprecated]: syz.4.6420 (pid 31562) Use of int in maxseg socket option. [ 826.876565][T31562] Use struct sctp_assoc_value instead [ 827.058546][T31575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6422'. [ 827.082252][T31567] x_tables: duplicate underflow at hook 3 [ 827.239188][T31580] ipvlan0: entered promiscuous mode [ 827.239219][T31580] ipvlan0: entered allmulticast mode [ 827.239341][T31580] veth0_vlan: entered allmulticast mode [ 827.352644][T31588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6425'. [ 827.373906][T31586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6424'. [ 827.374557][T31586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6424'. [ 827.417855][T31591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6426'. [ 827.424086][T31591] netlink: 'syz.1.6426': attribute type 1 has an invalid length. [ 827.424167][T31591] netlink: 'syz.1.6426': attribute type 4 has an invalid length. [ 827.424219][T31591] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.6426'. [ 827.446885][T31591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6426'. [ 827.464452][T31456] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.464765][T31456] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.465445][T31456] bridge_slave_0: entered allmulticast mode [ 827.483623][T31456] bridge_slave_0: entered promiscuous mode [ 827.503980][T31456] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.504185][T31456] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.504361][T31456] bridge_slave_1: entered allmulticast mode [ 827.508015][T31456] bridge_slave_1: entered promiscuous mode [ 827.593695][T31456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.605954][T31456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.610035][ T52] Bluetooth: hci3: command tx timeout [ 827.672997][T31456] team0: Port device team_slave_0 added [ 827.676294][T31456] team0: Port device team_slave_1 added [ 827.729614][T31456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.729635][T31456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.729665][T31456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.732175][T31456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.732193][T31456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.732224][T31456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.354750][T31602] syzkaller1: entered promiscuous mode [ 828.354777][T31602] syzkaller1: entered allmulticast mode [ 828.377490][T31601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.411912][T31601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.652406][T31456] hsr_slave_0: entered promiscuous mode [ 828.655601][T31456] hsr_slave_1: entered promiscuous mode [ 828.657171][T31456] debugfs: 'hsr0' already exists in 'hsr' [ 828.657195][T31456] Cannot create hsr debugfs directory [ 828.896089][T31619] pimreg: entered allmulticast mode [ 829.007715][T31629] bridge0: port 3(veth1_to_bridge) entered blocking state [ 829.007858][T31629] bridge0: port 3(veth1_to_bridge) entered disabled state [ 829.007984][T31629] veth1_to_bridge: entered allmulticast mode [ 829.017705][T31629] veth1_to_bridge: entered promiscuous mode [ 829.017901][T31629] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 829.018611][T31629] bridge0: port 3(veth1_to_bridge) entered blocking state [ 829.018722][T31629] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 829.282347][ C1] net_ratelimit: 498 callbacks suppressed [ 829.282372][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.283042][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.283568][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.283857][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.284124][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.284397][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.284700][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.284960][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.285596][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.285878][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.695049][ T52] Bluetooth: hci3: command tx timeout [ 834.289508][ C1] net_ratelimit: 42128 callbacks suppressed [ 834.289534][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.289735][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.289794][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.289936][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.290060][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.290176][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.290428][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.290694][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.290954][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.291184][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.649523][ C1] sched: DL replenish lagged too much [ 839.299466][ C1] net_ratelimit: 43458 callbacks suppressed [ 839.299492][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.299562][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.299725][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.299759][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.299956][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.299959][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.300186][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.300220][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.300384][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.300455][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.309491][ C0] net_ratelimit: 44002 callbacks suppressed [ 844.309518][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.309536][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.309705][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.309783][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.309890][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.310045][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.310073][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.310282][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.310286][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.310467][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.319546][ C0] net_ratelimit: 42710 callbacks suppressed [ 849.319572][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.319656][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.319791][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.319948][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.320035][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.320219][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.320252][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.320445][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.320490][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.320643][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.329596][ C1] net_ratelimit: 37473 callbacks suppressed [ 854.329630][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.329781][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.329889][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.330161][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.330250][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.330468][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.330672][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.330724][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.330869][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.330988][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.339520][ C1] net_ratelimit: 28542 callbacks suppressed [ 859.339546][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.339874][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.340133][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.340356][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.340413][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.340557][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.340671][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.340752][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.340962][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:59:6e:d4:65:9a, vlan:0) [ 859.341010][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 864.349493][ C0] net_ratelimit: 28625 callbacks suppressed [ 864.349521][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.349667][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.349721][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.349917][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.349962][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.350193][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.350222][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.350401][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.350481][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.350620][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 869.359508][ C1] net_ratelimit: 29597 callbacks suppressed [ 869.359535][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.359632][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.359833][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.360092][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.360101][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.360395][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.360669][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.360955][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.361213][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.361503][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:59:6e:d4:65:9a, vlan:0) [ 874.369461][ C1] net_ratelimit: 32021 callbacks suppressed [ 874.369487][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.369746][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.369797][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.369930][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.370121][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:59:6e:d4:65:9a, vlan:0) [ 874.370138][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.370320][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.370501][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.370589][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.370680][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.379479][ C1] net_ratelimit: 31599 callbacks suppressed [ 879.379505][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.379825][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.380105][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:59:6e:d4:65:9a, vlan:0) [ 879.380425][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.380581][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.380662][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.380854][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.380863][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.381057][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.381125][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.389508][ C0] net_ratelimit: 32765 callbacks suppressed [ 884.389533][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.389671][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.389772][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.389944][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.390231][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.390483][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.390735][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.390994][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.391273][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.391335][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.399434][ C1] net_ratelimit: 33036 callbacks suppressed [ 889.399462][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:59:6e:d4:65:9a, vlan:0) [ 889.399563][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.399971][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.400006][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.400173][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.400349][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.400378][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.400665][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.400792][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.400974][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.409541][ C0] net_ratelimit: 31706 callbacks suppressed [ 894.409567][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.409672][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.409805][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.409967][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:59:6e:d4:65:9a, vlan:0) [ 894.410279][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.410438][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.410476][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.410683][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.410738][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.410879][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.419540][ C1] net_ratelimit: 33651 callbacks suppressed [ 899.419568][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.419831][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.420091][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.420274][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.420351][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.420459][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.420640][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.420645][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.420820][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.420904][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.429427][ C1] net_ratelimit: 34540 callbacks suppressed [ 904.429460][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.429599][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.429740][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.429811][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.429999][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.430080][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 904.430283][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.430550][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.430559][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.430808][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.439562][ C1] net_ratelimit: 34809 callbacks suppressed [ 909.439588][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.439873][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.440167][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.440428][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.440454][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.440635][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.440694][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.440812][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.440952][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.440990][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.449620][ C1] net_ratelimit: 34568 callbacks suppressed [ 914.449647][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.449706][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.449891][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.449913][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.450070][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.450160][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.450276][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.450398][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.450476][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.450634][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.459485][ C0] net_ratelimit: 34250 callbacks suppressed [ 919.459513][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.459531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.459716][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.459817][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.459962][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.460151][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.460185][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.460394][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.460429][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.460601][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.469531][ C0] net_ratelimit: 33297 callbacks suppressed [ 924.469552][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.469556][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.469750][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.469844][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:59:6e:d4:65:9a, vlan:0) [ 924.469940][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.470154][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.470292][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.470337][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.470563][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.470587][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.479458][ C0] net_ratelimit: 33105 callbacks suppressed [ 929.479484][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.479535][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.479817][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:59:6e:d4:65:9a, vlan:0) [ 929.479927][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.480150][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.480289][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.480371][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.480565][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.480836][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.480838][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.489554][ C0] net_ratelimit: 31420 callbacks suppressed [ 934.489581][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.489789][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.489799][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.490014][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.490104][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.490259][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.490413][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:59:6e:d4:65:9a, vlan:0) [ 934.490502][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.490953][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.491172][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.499526][ C0] net_ratelimit: 32116 callbacks suppressed [ 939.499550][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.499579][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.499742][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.499866][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.499931][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.500125][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.500149][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.500339][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.500383][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.500569][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.059392][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 940.173981][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P31633/1:b..l [ 940.182025][ C0] rcu: (detected by 0, t=10514 jiffies, g=160373, q=3510 ncpus=2) [ 940.189985][ C0] task:syz-executor state:R running task stack:28200 pid:31633 tgid:31633 ppid:30045 task_flags:0x400040 flags:0x00080002 [ 940.203547][ C0] Call Trace: [ 940.206911][ C0] [ 940.209892][ C0] __schedule+0x17db/0x58f0 [ 940.214457][ C0] ? __lock_acquire+0x747/0x2de0 [ 940.219483][ C0] ? __lock_acquire+0x747/0x2de0 [ 940.224484][ C0] ? __pfx___schedule+0x10/0x10 [ 940.229422][ C0] preempt_schedule_irq+0x4b/0x90 [ 940.234517][ C0] irqentry_exit+0x14f/0x910 [ 940.239185][ C0] ? trace_irq_disable+0x3b/0x140 [ 940.244293][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 940.250333][ C0] RIP: 0010:unwind_next_frame+0x1993/0x2550 [ 940.256282][ C0] Code: bf 04 24 48 01 c6 4c 89 f7 48 89 da eb 41 49 8d 5d 02 49 83 c5 03 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 b6 0a 00 00 <4c> 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 c5 0a 00 00 48 0f [ 940.275933][ C0] RSP: 0018:ffffc90005fa79a0 EFLAGS: 00000246 [ 940.282063][ C0] RAX: 0000000000000000 RBX: ffffffff9116ec1a RCX: 0000000000000000 [ 940.290081][ C0] RDX: ffffffff9116ec1c RSI: 0000000000000008 RDI: ffffc90005fa7aa8 [ 940.298102][ C0] RBP: 1ffffffff222dd83 R08: ffffc90005fa7b80 R09: 0000000000000000 [ 940.306122][ C0] R10: ffffc90005fa7a98 R11: fffff52000bf4f55 R12: dffffc0000000000 [ 940.314145][ C0] R13: ffffffff9116ec1b R14: ffffc90005fa7a48 R15: ffffc90005fa7a90 [ 940.322194][ C0] ? stack_trace_save+0xa9/0x100 [ 940.327270][ C0] ? unwind_next_frame+0x8f/0x2550 [ 940.332474][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 940.338167][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 940.344372][ C0] arch_stack_walk+0x11b/0x150 [ 940.349192][ C0] ? kasan_save_track+0x3e/0x80 [ 940.354117][ C0] ? do_getname+0x2e/0x250 [ 940.358589][ C0] stack_trace_save+0xa9/0x100 [ 940.363418][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 940.368838][ C0] ? lock_acquire+0x115/0x350 [ 940.373565][ C0] ? count_memcg_event_mm+0x21/0x260 [ 940.378904][ C0] kasan_save_track+0x3e/0x80 [ 940.383701][ C0] __kasan_slab_alloc+0x6c/0x80 [ 940.388612][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 940.394132][ C0] ? do_getname+0x2e/0x250 [ 940.398595][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 940.404294][ C0] ? do_getname+0x2e/0x250 [ 940.408780][ C0] do_getname+0x2e/0x250 [ 940.413082][ C0] ? __se_sys_symlinkat+0x22/0x2b0 [ 940.418253][ C0] __se_sys_symlinkat+0x2e/0x2b0 [ 940.423254][ C0] do_syscall_64+0x166/0x520 [ 940.427938][ C0] ? trace_irq_disable+0x3b/0x140 [ 940.433015][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.439135][ C0] ? clear_bhb_loop+0x70/0xc0 [ 940.443869][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.449901][ C0] RIP: 0033:0x7f586e79d217 [ 940.454360][ C0] RSP: 002b:00007ffd5d13d668 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 940.462903][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f586e79d217 [ 940.470936][ C0] RDX: 00007f586e836024 RSI: 00000000ffffff9c RDI: 00007ffd5d13d700 [ 940.478967][ C0] RBP: 00007ffd5d13d6ac R08: 0000000000000001 R09: 00000000ffffffff [ 940.487022][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000043 [ 940.495047][ C0] R13: 00000000000927c0 R14: 00000000000ca664 R15: 00007ffd5d13d700 [ 940.503096][ C0] [ 940.506168][ C0] rcu: rcu_preempt kthread starved for 3090 jiffies! g160373 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 940.517234][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 940.527248][ C0] rcu: RCU grace-period kthread stack dump: [ 940.533192][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 940.546772][ C0] Call Trace: [ 940.550098][ C0] [ 940.553076][ C0] __schedule+0x17db/0x58f0 [ 940.557637][ C0] ? __lock_acquire+0x747/0x2de0 [ 940.562648][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 940.567835][ C0] ? __pfx___schedule+0x10/0x10 [ 940.572783][ C0] ? lock_acquire+0x115/0x350 [ 940.577536][ C0] ? schedule+0x90/0x2b0 [ 940.581843][ C0] schedule+0x164/0x2b0 [ 940.586067][ C0] schedule_timeout+0x152/0x2c0 [ 940.591008][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 940.596441][ C0] ? __pfx_process_timeout+0x10/0x10 [ 940.601802][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 940.607677][ C0] ? prepare_to_swait_event+0x322/0x350 [ 940.613386][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 940.618304][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 940.624545][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 940.629912][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 940.635178][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 940.641069][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 940.645744][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 940.650997][ C0] ? __kthread_parkme+0x71/0x1f0 [ 940.656001][ C0] ? __kthread_parkme+0x199/0x1f0 [ 940.661097][ C0] kthread+0x38b/0x480 [ 940.665211][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 940.670451][ C0] ? __pfx_kthread+0x10/0x10 [ 940.675087][ C0] ret_from_fork+0x514/0xb70 [ 940.679764][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 940.684920][ C0] ? __switch_to+0xc89/0x1420 [ 940.689663][ C0] ? __pfx_kthread+0x10/0x10 [ 940.694298][ C0] ret_from_fork_asm+0x1a/0x30 [ 940.699139][ C0] [ 940.702277][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 940.708639][ C0] CPU: 0 UID: 0 PID: 17947 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 940.718161][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 940.728254][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 940.735255][ C0] RIP: 0010:kasan_check_range+0x8a/0x2c0 [ 940.740941][ C0] Code: 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 <4c> 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 9e 01 00 00 49 ff c3 [ 940.760598][ C0] RSP: 0018:ffffc90000007158 EFLAGS: 00000206 [ 940.766739][ C0] RAX: ffff88802bb49f01 RBX: dffffc0000000001 RCX: ffffffff81781ba6 [ 940.774759][ C0] RDX: 0000000000000001 RSI: 0000000000000060 RDI: ffffc90000007208 [ 940.782777][ C0] RBP: 0000000000000000 R08: ffffc90000007267 R09: 1ffff92000000e4c [ 940.790801][ C0] R10: dffffc0000000000 R11: fffff52000000e41 R12: 000000000000000c [ 940.798843][ C0] R13: ffff88802bb49f40 R14: fffff52000000e4d R15: 1ffff92000000e41 [ 940.806870][ C0] FS: 0000000000000000(0000) GS:ffff888124cca000(0000) knlGS:0000000000000000 [ 940.815854][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.822507][ C0] CR2: 00007fb275fffffc CR3: 000000000eb48000 CR4: 00000000003526f0 [ 940.830533][ C0] Call Trace: [ 940.833857][ C0] [ 940.836750][ C0] __asan_memset+0x22/0x50 [ 940.841213][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 940.847409][ C0] __unwind_start+0x36/0x660 [ 940.852054][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 940.857488][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 940.863199][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 940.869424][ C0] arch_stack_walk+0xe3/0x150 [ 940.874162][ C0] ? skb_clone+0x212/0x3a0 [ 940.878642][ C0] stack_trace_save+0xa9/0x100 [ 940.883455][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 940.888878][ C0] ? br_nf_post_routing+0x150/0xee0 [ 940.894152][ C0] kasan_save_track+0x3e/0x80 [ 940.898950][ C0] __kasan_slab_alloc+0x6c/0x80 [ 940.903853][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 940.909381][ C0] ? skb_clone+0x212/0x3a0 [ 940.913863][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 940.919571][ C0] ? skb_clone+0x212/0x3a0 [ 940.924052][ C0] skb_clone+0x212/0x3a0 [ 940.928354][ C0] br_flood+0x613/0x8d0 [ 940.932593][ C0] br_handle_frame_finish+0x1119/0x1950 [ 940.938224][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 940.944179][ C0] ? net_generic+0x1e/0x240 [ 940.948746][ C0] ? br_nf_pre_routing+0xc41/0x14b0 [ 940.954013][ C0] br_handle_frame+0x92e/0x1600 [ 940.958937][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 940.964285][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 940.970337][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 940.975672][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 940.980938][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 940.986373][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 940.992175][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 940.998311][ C0] ? ip6_rcv_finish+0x265/0x280 [ 941.003440][ C0] ? NF_HOOK+0x336/0x3c0 [ 941.007765][ C0] ? process_backlog+0x3de/0x18b0 [ 941.012838][ C0] ? process_backlog+0x3de/0x18b0 [ 941.017928][ C0] process_backlog+0x727/0x18b0 [ 941.022839][ C0] ? process_backlog+0x3de/0x18b0 [ 941.027941][ C0] __napi_poll+0xaa/0x330 [ 941.032326][ C0] net_rx_action+0x61d/0xf50 [ 941.036986][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 941.042155][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 941.047312][ C0] handle_softirqs+0x226/0x860 [ 941.052147][ C0] ? do_softirq+0x77/0xd0 [ 941.056542][ C0] ? neigh_periodic_work+0xc23/0xe40 [ 941.061893][ C0] do_softirq+0x77/0xd0 [ 941.066109][ C0] [ 941.069082][ C0] [ 941.072048][ C0] __local_bh_enable_ip+0x100/0x140 [ 941.077347][ C0] neigh_periodic_work+0xc23/0xe40 [ 941.082528][ C0] ? process_scheduled_works+0x97a/0x1630 [ 941.088311][ C0] process_scheduled_works+0xc3d/0x1630 [ 941.093967][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 941.100016][ C0] ? assign_work+0x3cf/0x5d0 [ 941.104666][ C0] worker_thread+0xa47/0xfb0 [ 941.109346][ C0] kthread+0x38b/0x480 [ 941.113457][ C0] ? __pfx_worker_thread+0x10/0x10 [ 941.118633][ C0] ? __pfx_kthread+0x10/0x10 [ 941.123275][ C0] ret_from_fork+0x514/0xb70 [ 941.127927][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 941.133085][ C0] ? __switch_to+0xc89/0x1420 [ 941.137837][ C0] ? __pfx_kthread+0x10/0x10 [ 941.142489][ C0] ret_from_fork_asm+0x1a/0x30 [ 941.147332][ C0]